CVE-2008-1002
published 2008-03-19CVE-2008-1002: Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1 allows remote attackers to inject arbitrary web script or HTML via a crafted javascript…
PriorityP418medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
3.02%
86.1th percentile
Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1 allows remote attackers to inject arbitrary web script or HTML via a crafted javascript: URL.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Bugzilla
CVE-2008-2384 mod_auth_mysql: character encoding SQL injection flaw
bugzilla·2009-01-15·CVSS 7.5
CVE-2008-2384 [HIGH] CVE-2008-2384 mod_auth_mysql: character encoding SQL injection flaw
CVE-2008-2384 mod_auth_mysql: character encoding SQL injection flaw
Martin Joey Schulze discovered a flaw in the way mod_auth_mysql handles certain multibyte character encodings.
If mod_auth_mysql is configured to use use a multibyte character set that allows the backslash '\' character as part of the character encodings, it is possible to inject arbitrary SQL commands to the MySQL database server.
Discussion:
Public now via:
http://www.openwall.com/lists/oss-security/2009/01/21/10
Debian patch:
http://klecker.debian.org/~white/mod-auth-mysql/CVE-2008-2384_mod-auth-mysql.patch
---
Created mod_auth_mysql tracking bugs for this issue
Affects: fedora-all [bug 663414]
---
This issue has been addressed in following products:
Red Hat Enterprise Linux 6
Via RHSA-2010:1002 https://rhn.
Bugzilla
CVE-2008-2374 bluez-libs: SDP payload processing vulnerability
bugzilla·2008-06-24·CVSS 9.8
CVE-2008-2374 [CRITICAL] CVE-2008-2374 bluez-libs: SDP payload processing vulnerability
CVE-2008-2374 bluez-libs: SDP payload processing vulnerability
Description of problem:
The SDP parsing code blindly trusts string length fields in incoming
SDP packets, exposing reliant applications to over-the-wireless memory
manipulation attacks. An attacker need only send a malformed
response to an SDP query to take advantage of this.
This is most apparent in file bluez-libs-3.30/src/sdp.c, lines 988,
994, 1002 (see below). Also elsewhere in the code where input
pointers are advanced without checking bytes remaining to be parsed.
The root of the problem is that in bluez-libs-3.30/src/sdp.c:1125, the
function sdp_extract_pdu() takes a buffer to parse (in) and a pointer
to a length field (out), but it does not take an incoming length field
(in).
Attached is a patch to fix this issue.
http://docs.info.apple.com/article.html?artnum=307563http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.htmlhttp://secunia.com/advisories/29393http://www.kb.cert.org/vuls/id/766019http://www.securityfocus.com/bid/28290http://www.securityfocus.com/bid/28328http://www.securitytracker.com/id?1019653http://www.us-cert.gov/cas/techalerts/TA08-079A.htmlhttp://www.vupen.com/english/advisories/2008/0920/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/41335http://docs.info.apple.com/article.html?artnum=307563http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.htmlhttp://secunia.com/advisories/29393http://www.kb.cert.org/vuls/id/766019http://www.securityfocus.com/bid/28290http://www.securityfocus.com/bid/28328http://www.securitytracker.com/id?1019653http://www.us-cert.gov/cas/techalerts/TA08-079A.htmlhttp://www.vupen.com/english/advisories/2008/0920/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/41335
2008-03-19
Published