# CVEs published 2008-06-02 28 CVEs were published on June 2, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2008-1027](https://cve.now/CVE-2008-1027.md): Apple Filing Protocol (AFP) Server in Apple Mac OS X before 10.5.3 does not verify that requested files and directories are inside shared fo (no CVSS) - [CVE-2008-1028](https://cve.now/CVE-2008-1028.md): Unspecified vulnerability in AppKit in Apple Mac OS X before 10.5 allows user-assisted remote attackers to execute arbitrary code or cause a (no CVSS) - [CVE-2008-1030](https://cve.now/CVE-2008-1030.md): Integer overflow in the CFDataReplaceBytes function in the CFData API in CoreFoundation in Apple Mac OS X before 10.5.3 allows context-depen (no CVSS) - [CVE-2008-1031](https://cve.now/CVE-2008-1031.md): CoreGraphics in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application cra (no CVSS) - [CVE-2008-1032](https://cve.now/CVE-2008-1032.md): Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.3 allows user-assisted remote attackers to execute arbitrary c (no CVSS) - [CVE-2008-1033](https://cve.now/CVE-2008-1033.md): The scheduler in CUPS in Apple Mac OS X 10.5 before 10.5.3, when debug logging is enabled and a printer requires a password, allows attacker (no CVSS) - [CVE-2008-1034](https://cve.now/CVE-2008-1034.md): Integer underflow in Help Viewer in Apple Mac OS X before 10.5 allows remote attackers to execute arbitrary code or cause a denial of servic (no CVSS) - [CVE-2008-1036](https://cve.now/CVE-2008-1036.md): The International Components for Unicode (ICU) library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and other operating syst (no CVSS) - [CVE-2008-1571](https://cve.now/CVE-2008-1571.md): Directory traversal vulnerability in the embedded web server in Image Capture in Apple Mac OS X before 10.5 allows remote attackers to read (no CVSS) - [CVE-2008-1572](https://cve.now/CVE-2008-1572.md): Image Capture in Apple Mac OS X before 10.5 does not properly use temporary files, which allows local users to overwrite arbitrary files, an (no CVSS) - [CVE-2008-1573](https://cve.now/CVE-2008-1573.md): The BMP and GIF image decoding engine in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to obtain sensitive information (me (no CVSS) - [CVE-2008-1574](https://cve.now/CVE-2008-1574.md): Integer overflow in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service ( (no CVSS) - [CVE-2008-1575](https://cve.now/CVE-2008-1575.md): Unspecified vulnerability in the Apple Type Services (ATS) server in Apple Mac OS X 10.5 before 10.5.3 allows user-assisted remote attackers (no CVSS) - [CVE-2008-1576](https://cve.now/CVE-2008-1576.md): Mail in Apple Mac OS X before 10.5, when an IPv6 SMTP server is used, does not properly initialize memory, which might allow remote attacker (no CVSS) - [CVE-2008-1577](https://cve.now/CVE-2008-1577.md): Unspecified vulnerability in the Pixlet codec in Apple Pixlet Video in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbit (no CVSS) - [CVE-2008-1578](https://cve.now/CVE-2008-1578.md): The sso\_util program in Single Sign-On in Apple Mac OS X before 10.5.3 places passwords on the command line, which allows local users to obt (no CVSS) - [CVE-2008-1579](https://cve.now/CVE-2008-1579.md): Wiki Server in Apple Mac OS X 10.5 before 10.5.3 allows remote attackers to obtain sensitive information (user names) by reading the error m (no CVSS) - [CVE-2008-1580](https://cve.now/CVE-2008-1580.md): CFNetwork in Safari in Apple Mac OS X before 10.5.3 automatically sends an SSL client certificate in response to a web server's certificate (no CVSS) - [CVE-2008-2098](https://cve.now/CVE-2008-2098.md): Heap-based buffer overflow in the VMware Host Guest File System (HGFS) in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 bef (no CVSS) - [CVE-2008-2099](https://cve.now/CVE-2008-2099.md): Unspecified vulnerability in VMCI in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, and VMware ACE (no CVSS) - [CVE-2008-2359](https://cve.now/CVE-2008-2359.md): The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows (no CVSS) - [CVE-2008-2363](https://cve.now/CVE-2008-2363.md): The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers (no CVSS) - [CVE-2008-2426](https://cve.now/CVE-2008-2426.md): Multiple stack-based buffer overflows in Imlib 2 (aka imlib2) 1.4.0 allow user-assisted remote attackers to cause a denial of service (crash (no CVSS) - [CVE-2008-2511](https://cve.now/CVE-2008-2511.md): Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 (aka UmxEventCliLib) ActiveX control in UmxEventCli.dll in CA Int (no CVSS) - [CVE-2008-2512](https://cve.now/CVE-2008-2512.md): Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attack (no CVSS) - [CVE-2008-2513](https://cve.now/CVE-2008-2513.md): Buffer overflow in the kernel in IBM AIX 5.2, 5.3, and 6.1 allows local users to execute arbitrary code in kernel mode via unknown attack ve (no CVSS) - [CVE-2008-2514](https://cve.now/CVE-2008-2514.md): Buffer overflow in errpt in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via unknown attack vectors. (no CVSS) - [CVE-2008-2515](https://cve.now/CVE-2008-2515.md): Unspecified vulnerability in iostat in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via unknown vectors related to an "en (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-06-02 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.