# CVEs published 2008-08-04

27 CVEs were published on August 4, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3451](https://cve.now/CVE-2008-3451.md): PhpWebGallery 1.7.0 and 1.7.1 allows remote authenticated users with advisor privileges to obtain the real e-mail addresses of other users b (no CVSS)
- [CVE-2008-3452](https://cve.now/CVE-2008-3452.md): SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the loc\_id (no CVSS)
- [CVE-2008-3453](https://cve.now/CVE-2008-3453.md): Multiple unspecified vulnerabilities in ImpressCMS 1.0 have unknown impact and attack vectors, related to modules/admin.php and "a few files (no CVSS)
- [CVE-2008-3454](https://cve.now/CVE-2008-3454.md): JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the "adm" cook (no CVSS)
- [CVE-2008-3455](https://cve.now/CVE-2008-3455.md): PHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2.0 allows remote attackers to execute arbitr (no CVSS)
- [CVE-2008-3456](https://cve.now/CVE-2008-3456.md): phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easi (no CVSS)
- [CVE-2008-3457](https://cve.now/CVE-2008-3457.md): Cross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary (no CVSS)
- [CVE-2008-3458](https://cve.now/CVE-2008-3458.md): Vtiger CRM before 5.0.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to r (no CVSS)
- [CVE-2008-3459](https://cve.now/CVE-2008-3459.md): Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbit (no CVSS)
- [CVE-2008-3450](https://cve.now/CVE-2008-3450.md): Unspecified vulnerability in the namefs kernel module in Sun Solaris 8 through 10 allows local users to gain privileges or cause a denial of (no CVSS)
- [CVE-2008-3445](https://cve.now/CVE-2008-3445.md): SQL injection vulnerability in index.php in phpMyRealty (PMR) 2.0.0 allows remote attackers to execute arbitrary SQL commands via the locati (no CVSS)
- [CVE-2008-3446](https://cve.now/CVE-2008-3446.md): Directory traversal vulnerability in inc/wysiwyg.php in LetterIt 2 allows remote attackers to include and execute arbitrary local files via (no CVSS)
- [CVE-2008-3447](https://cve.now/CVE-2008-3447.md): The scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of service (infinite loop) via a malformed ZIP (no CVSS)
- [CVE-2008-3448](https://cve.now/CVE-2008-3448.md): Cross-site scripting (XSS) vulnerability in index.php in common solutions csphonebook 1.02 allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2008-3449](https://cve.now/CVE-2008-3449.md): MailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of service (crash) via multiple IMAP connection r (no CVSS)
- [CVE-2003-1562](https://cve.now/CVE-2003-1562.md): sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a d (no CVSS)
- [CVE-2004-2760](https://cve.now/CVE-2004-2760.md): sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection after a root login attempt with the correct p (no CVSS)
- [CVE-2008-3444](https://cve.now/CVE-2008-3444.md): The content layout component in Mozilla Firefox 3.0 and 3.0.1 allows remote attackers to cause a denial of service (NULL pointer dereference (no CVSS)
- [CVE-2008-1232](https://cve.now/CVE-2008-1232.md): Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2008-2320](https://cve.now/CVE-2008-2320.md): Stack-based buffer overflow in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.4, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1. (no CVSS)
- [CVE-2008-2321](https://cve.now/CVE-2008-2321.md): Unspecified vulnerability in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2008-2322](https://cve.now/CVE-2008-2322.md): Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11, 10.5.2, and 10.5.4 allows remote attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2008-2323](https://cve.now/CVE-2008-2323.md): Unspecified vulnerability in Data Detectors Engine in Apple Mac OS X 10.5.4 allows attackers to cause a denial of service (resource consumpt (no CVSS)
- [CVE-2008-2324](https://cve.now/CVE-2008-2324.md): The Repair Permissions tool in Disk Utility in Apple Mac OS X 10.4.11 adds the setuid bit to the emacs executable file, which allows local u (no CVSS)
- [CVE-2008-2325](https://cve.now/CVE-2008-2325.md): QuickLook in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup (no CVSS)
- [CVE-2008-2370](https://cve.now/CVE-2008-2370.md): Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normaliz (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2008-3423](https://cve.now/CVE-2008-3423.md): IBM WebSphere Portal 5.1 through 6.1.0.0 allows remote attackers to bypass authentication and obtain administrative access via unspecified v (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-08-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.