# CVEs published 2008-08-01

22 CVEs were published on August 1, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-2952](https://cve.now/CVE-2007-2952.md): Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allo (no CVSS)
- [CVE-2008-1376](https://cve.now/CVE-2008-1376.md): A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5\_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which m (no CVSS)
- [CVE-2008-1662](https://cve.now/CVE-2008-1662.md): Unspecified vulnerability in the HP System Administration Manager (SAM) on HP-UX B.11.11 and B.11.23, when used to configure NFS, might allo (no CVSS)
- [CVE-2008-1810](https://cve.now/CVE-2008-1810.md): Untrusted search path vulnerability in dbmsrv in SAP MaxDB 7.6.03.15 on Linux allows local users to gain privileges via a modified PATH envi (no CVSS)
- [CVE-2008-2235](https://cve.now/CVE-2008-2235.md): OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto token (no CVSS)
- [CVE-2008-2315](https://cve.now/CVE-2008-2315.md): Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to th (no CVSS)
- [CVE-2008-2316](https://cve.now/CVE-2008-2316.md): Integer overflow in \_hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat crypt (no CVSS)
- [CVE-2008-2935](https://cve.now/CVE-2008-2935.md): Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4Dec (no CVSS)
- [CVE-2008-3142](https://cve.now/CVE-2008-3142.md): Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (cra (no CVSS)
- [CVE-2008-3143](https://cve.now/CVE-2008-3143.md): Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to ( (no CVSS)
- [CVE-2008-3144](https://cve.now/CVE-2008-3144.md): Multiple integer overflows in the PyOS\_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attacke (no CVSS)
- [CVE-2008-3175](https://cve.now/CVE-2008-3175.md): Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows (no CVSS)
- [CVE-2008-3433](https://cve.now/CVE-2008-3433.md): SpeedBit Download Accelerator Plus (DAP) before 8.6.3.9 does not properly verify the authenticity of updates, which allows man-in-the-middle (no CVSS)
- [CVE-2008-3434](https://cve.now/CVE-2008-3434.md): Apple iTunes before 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitra (no CVSS)
- [CVE-2008-3435](https://cve.now/CVE-2008-3435.md): LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly verify the authenticity of updates, which allows man-in-the-middle attacke (no CVSS)
- [CVE-2008-3436](https://cve.now/CVE-2008-3436.md): The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middl (no CVSS)
- [CVE-2008-3437](https://cve.now/CVE-2008-3437.md): OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute (no CVSS)
- [CVE-2008-3438](https://cve.now/CVE-2008-3438.md): Apple Mac OS X does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via (no CVSS)
- [CVE-2008-3439](https://cve.now/CVE-2008-3439.md): SpeedBit Video Acceleration before 2.2.1.8 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to (no CVSS)
- [CVE-2008-3440](https://cve.now/CVE-2008-3440.md): Sun Java 1.6.0\_03 and earlier versions, and possibly later versions, does not properly verify the authenticity of updates, which allows man- (no CVSS)
- [CVE-2008-3441](https://cve.now/CVE-2008-3441.md): Nullsoft Winamp before 5.24 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitr (no CVSS)
- [CVE-2008-3442](https://cve.now/CVE-2008-3442.md): WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-08-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.