# CVEs published 2008-08-01

22 CVEs were published on August 1, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-2952](https://cve.now/CVE-2007-2952.md): Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32… (no CVSS)
- [CVE-2008-1376](https://cve.now/CVE-2008-1376.md): A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5\_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which… (no CVSS)
- [CVE-2008-1662](https://cve.now/CVE-2008-1662.md): Unspecified vulnerability in the HP System Administration Manager (SAM) on HP-UX B.11.11 and B.11.23, when used to configure NFS, might… (no CVSS)
- [CVE-2008-1810](https://cve.now/CVE-2008-1810.md): Untrusted search path vulnerability in dbmsrv in SAP MaxDB 7.6.03.15 on Linux allows local users to gain privileges via a modified PATH… (no CVSS)
- [CVE-2008-2235](https://cve.now/CVE-2008-2235.md): OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto… (no CVSS)
- [CVE-2008-2315](https://cve.now/CVE-2008-2315.md): Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to… (no CVSS)
- [CVE-2008-2316](https://cve.now/CVE-2008-2316.md): Integer overflow in \_hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat… (no CVSS)
- [CVE-2008-2935](https://cve.now/CVE-2008-2935.md): Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka… (no CVSS)
- [CVE-2008-3142](https://cve.now/CVE-2008-3142.md): Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service… (no CVSS)
- [CVE-2008-3143](https://cve.now/CVE-2008-3143.md): Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to… (no CVSS)
- [CVE-2008-3144](https://cve.now/CVE-2008-3144.md): Multiple integer overflows in the PyOS\_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent… (no CVSS)
- [CVE-2008-3175](https://cve.now/CVE-2008-3175.md): Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5… (no CVSS)
- [CVE-2008-3433](https://cve.now/CVE-2008-3433.md): SpeedBit Download Accelerator Plus (DAP) before 8.6.3.9 does not properly verify the authenticity of updates, which allows… (no CVSS)
- [CVE-2008-3434](https://cve.now/CVE-2008-3434.md): Apple iTunes before 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute… (no CVSS)
- [CVE-2008-3435](https://cve.now/CVE-2008-3435.md): LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly verify the authenticity of updates, which allows man-in-the-middle… (no CVSS)
- [CVE-2008-3436](https://cve.now/CVE-2008-3436.md): The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows… (no CVSS)
- [CVE-2008-3437](https://cve.now/CVE-2008-3437.md): OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to… (no CVSS)
- [CVE-2008-3438](https://cve.now/CVE-2008-3438.md): Apple Mac OS X does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code… (no CVSS)
- [CVE-2008-3439](https://cve.now/CVE-2008-3439.md): SpeedBit Video Acceleration before 2.2.1.8 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers… (no CVSS)
- [CVE-2008-3440](https://cve.now/CVE-2008-3440.md): Sun Java 1.6.0\_03 and earlier versions, and possibly later versions, does not properly verify the authenticity of updates, which allows… (no CVSS)
- [CVE-2008-3441](https://cve.now/CVE-2008-3441.md): Nullsoft Winamp before 5.24 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute… (no CVSS)
- [CVE-2008-3442](https://cve.now/CVE-2008-3442.md): WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-08-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.