# CVEs published 2008-09-02

17 CVEs were published on September 2, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3877](https://cve.now/CVE-2008-3877.md): Stack-based buffer overflow in Acoustica Mixcraft 4.1 Build 96 and 4.2 Build 98 allows user-assisted attackers to execute arbitrary code via (no CVSS)
- [CVE-2008-3878](https://cve.now/CVE-2008-3878.md): Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Contro (no CVSS)
- [CVE-2008-3879](https://cve.now/CVE-2008-3879.md): The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Control allows remote att (no CVSS)
- [CVE-2008-3880](https://cve.now/CVE-2008-3880.md): SQL injection vulnerability in zm\_html\_view\_event.php in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2008-3881](https://cve.now/CVE-2008-3881.md): Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2008-3882](https://cve.now/CVE-2008-3882.md): Unspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary commands via (1) (no CVSS)
- [CVE-2008-3883](https://cve.now/CVE-2008-3883.md): configvar in Caudium 1.4.12 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/roken#####.pike temporary file. (no CVSS)
- [CVE-2008-3884](https://cve.now/CVE-2008-3884.md): Cross-site scripting (XSS) vulnerability in Blogn (BURO GUN) 1.9.7 and earlier allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2008-3885](https://cve.now/CVE-2008-3885.md): Cross-site request forgery (CSRF) vulnerability in Blogn (BURO GUN) 1.9.7 and earlier allows remote attackers to hijack the authentication o (no CVSS)
- [CVE-2008-3886](https://cve.now/CVE-2008-3886.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in dotProject 2.1.2 allow remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2008-3887](https://cve.now/CVE-2008-3887.md): Multiple SQL injection vulnerabilities in index.php in dotProject 2.1.2 allow (1) remote authenticated users to execute arbitrary SQL comman (no CVSS)
- [CVE-2008-3888](https://cve.now/CVE-2008-3888.md): SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL commands via the uid p (no CVSS)
- [CVE-2003-1564](https://cve.now/CVE-2003-1564.md): libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to caus (no CVSS)
- [CVE-2008-3146](https://cve.now/CVE-2008-3146.md): Multiple buffer overflows in packet\_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to cause a denial of se (no CVSS)
- [CVE-2008-3538](https://cve.now/CVE-2008-3538.md): Unspecified vulnerability in HP Enterprise Discovery 2.0 through 2.52 on Windows allows remote authenticated users to execute arbitrary code (no CVSS)
- [CVE-2008-3875](https://cve.now/CVE-2008-3875.md): The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv\_90 allows local users to bypass chroot, zones, and the Solaris Trusted Ext (no CVSS)
- [CVE-2008-3876](https://cve.now/CVE-2008-3876.md): Apple iPhone 2.0.2, in some configurations, allows physically proximate attackers to bypass intended access restrictions, and obtain sensiti (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-09-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.