# CVEs published 2008-03-04

24 CVEs were published on March 4, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1111](https://cve.now/CVE-2008-1111.md): mod\_cgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote (no CVSS)
- [CVE-2008-1145](https://cve.now/CVE-2008-1145.md): Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems (no CVSS)
- [CVE-2008-1146](https://cve.now/CVE-2008-1146.md): A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 3-bit random hops (aka "Algorithm X3"), as used in OpenBSD 2.8 t (no CVSS)
- [CVE-2008-1147](https://cve.now/CVE-2008-1147.md): A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 2-bit random hops (aka "Algorithm X2"), as used in OpenBSD 2.6 t (no CVSS)
- [CVE-2008-1148](https://cve.now/CVE-2008-1148.md): A certain pseudo-random number generator (PRNG) algorithm that uses ADD with 0 random hops (aka "Algorithm A0"), as used in OpenBSD 3.5 thro (no CVSS)
- [CVE-2008-1149](https://cve.now/CVE-2008-1149.md): phpMyAdmin before 2.11.5 accesses $\_REQUEST to obtain some parameters instead of $\_GET and $\_POST, which allows attackers in the same domain (no CVSS)
- [CVE-2008-1137](https://cve.now/CVE-2008-1137.md): SQL injection vulnerability in the Garys Cookbook (com\_garyscookbook) 1.1.1 and earlier component for Mambo and Joomla! allows remote attack (no CVSS)
- [CVE-2008-1138](https://cve.now/CVE-2008-1138.md): DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (system crash) via a certain ZERO\_MEM DLM (no CVSS)
- [CVE-2008-1139](https://cve.now/CVE-2008-1139.md): DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain privileges via a cer (no CVSS)
- [CVE-2008-1140](https://cve.now/CVE-2008-1140.md): DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISK\_IOCTL request to \\\\.\\DLKFDi (no CVSS)
- [CVE-2008-1141](https://cve.now/CVE-2008-1141.md): Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (kernel memory consumption (no CVSS)
- [CVE-2007-6702](https://cve.now/CVE-2007-6702.md): goform/QuickStart\_c0 on the GoAhead Web Server on the FS4104-AW (aka rooter) VDSL device contains a password in the typepassword field, whic (no CVSS)
- [CVE-2007-6703](https://cve.now/CVE-2007-6703.md): Unspecified vulnerability in vdccm before 0.10.1 in SynCE (SynCE-dccm) might allow attackers to cause a denial of service via unspecified ve (no CVSS)
- [CVE-2008-1134](https://cve.now/CVE-2008-1134.md): OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 supports authentication with a cookie that lacks a shared secret, which allows remot (no CVSS)
- [CVE-2008-1135](https://cve.now/CVE-2008-1135.md): OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 generates different responses depending on whether or not a username is valid in a f (no CVSS)
- [CVE-2008-1136](https://cve.now/CVE-2008-1136.md): The Utils::runScripts function in src/utils.cpp in vdccm 0.92 through 0.10.0 in SynCE (SynCE-dccm) allows remote attackers to execute arbitr (no CVSS)
- [CVE-2008-1079](https://cve.now/CVE-2008-1079.md): The outboxWriteUnsent function in FTPThread.class in SendFile.jar for Beehive Software SendFile.NET uses hard-coded credentials for an FTP s (no CVSS)
- [CVE-2008-1133](https://cve.now/CVE-2008-1133.md): The Drupal.checkPlain function in Drupal 6.0 only escapes the first instance of a character in ECMAScript, which allows remote attackers to (no CVSS)
- [CVE-2008-0930](https://cve.now/CVE-2008-0930.md): w\_editeur.c in XWine 1.0.1 for Debian GNU/Linux allows local users to overwrite or print arbitrary files via a symlink attack on the tempora (no CVSS)
- [CVE-2008-0931](https://cve.now/CVE-2008-0931.md): w\_export.c in XWine 1.0.1 on Debian GNU/Linux sets insecure permissions (0666) for /etc/wine/config, which might allow local users to execut (no CVSS)
- [CVE-2008-1129](https://cve.now/CVE-2008-1129.md): Cross-site scripting (XSS) vulnerability in admin/users/self.php in XRMS CRM allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2008-1130](https://cve.now/CVE-2008-1130.md): Unspecified vulnerability in IBM WebSphere MQ 6.0.x before 6.0.2.2 and 5.3 before Fix Pack 14 allows attackers to bypass access restrictions (no CVSS)
- [CVE-2008-1131](https://cve.now/CVE-2008-1131.md): Cross-site scripting (XSS) vulnerability in Drupal 6.0 allows remote authenticated users to inject arbitrary web script or HTML via titles i (no CVSS)
- [CVE-2008-1132](https://cve.now/CVE-2008-1132.md): Untrusted search path vulnerability in src/mainwindow.c in Net Activity Viewer 0.2.1 allows local users with Net Activity Viewer privileges (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-03-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.