# CVEs published 2008-09-03 28 CVEs were published on September 3, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2008-1739](https://cve.now/CVE-2008-1739.md): Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted ft (no CVSS) - [CVE-2008-3902](https://cve.now/CVE-2008-3902.md): HP firmware 68DTT F.0D stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which (no CVSS) - [CVE-2008-2101](https://cve.now/CVE-2008-2101.md): The VMware Consolidated Backup (VCB) command-line utilities in VMware ESX 3.0.1 through 3.0.3 and ESX 3.5 place a password on the command li (no CVSS) - [CVE-2008-3101](https://cve.now/CVE-2008-3101.md): Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to inject arbitrary web script or HTML via (1 (no CVSS) - [CVE-2008-3525](https://cve.now/CVE-2008-3525.md): The sbni\_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP\_NET\_ADMIN cap (no CVSS) - [CVE-2008-3536](https://cve.now/CVE-2008-3536.md): Unspecified vulnerability in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to cause a (no CVSS) - [CVE-2008-3537](https://cve.now/CVE-2008-3537.md): Unspecified vulnerability in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to cause a (no CVSS) - [CVE-2008-3691](https://cve.now/CVE-2008-3691.md): Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x befor (no CVSS) - [CVE-2008-3692](https://cve.now/CVE-2008-3692.md): Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x befor (no CVSS) - [CVE-2008-3693](https://cve.now/CVE-2008-3693.md): Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x befor (no CVSS) - [CVE-2008-3694](https://cve.now/CVE-2008-3694.md): Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x befor (no CVSS) - [CVE-2008-3695](https://cve.now/CVE-2008-3695.md): Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x befor (no CVSS) - [CVE-2008-3696](https://cve.now/CVE-2008-3696.md): Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x befor (no CVSS) - [CVE-2008-3697](https://cve.now/CVE-2008-3697.md): An unspecified ISAPI extension in VMware Server before 1.0.7 build 108231 allows remote attackers to cause a denial of service (IIS crash) v (no CVSS) - [CVE-2008-3698](https://cve.now/CVE-2008-3698.md): Unspecified vulnerability in the OpenProcess function in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before (no CVSS) - [CVE-2008-3791](https://cve.now/CVE-2008-3791.md): src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows local users to overwrite arbitrary files via a symlink (no CVSS) - [CVE-2008-3792](https://cve.now/CVE-2008-3792.md): net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4 does not verify that (no CVSS) - [CVE-2008-3891](https://cve.now/CVE-2008-3891.md): The SAML Single Sign-On (SSO) Service for Google Apps allows remote service providers to impersonate users at arbitrary service providers vi (no CVSS) - [CVE-2008-3892](https://cve.now/CVE-2008-3892.md): Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x (no CVSS) - [CVE-2008-3893](https://cve.now/CVE-2008-3893.md): Microsoft Bitlocker in Windows Vista before SP1 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this (CVSS 5.5) - [CVE-2008-3894](https://cve.now/CVE-2008-3894.md): IBM Lenovo firmware 7CETB5WW 2.05 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after (no CVSS) - [CVE-2008-3895](https://cve.now/CVE-2008-3895.md): LILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after (no CVSS) - [CVE-2008-3896](https://cve.now/CVE-2008-3896.md): Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and (no CVSS) - [CVE-2008-3897](https://cve.now/CVE-2008-3897.md): DiskCryptor 0.2.6 on Windows stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and (no CVSS) - [CVE-2008-3898](https://cve.now/CVE-2008-3898.md): Secu Star DriveCrypt Plus Pack 3.9 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer befor (no CVSS) - [CVE-2008-3899](https://cve.now/CVE-2008-3899.md): TrueCrypt 5.0 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, whic (no CVSS) - [CVE-2008-3900](https://cve.now/CVE-2008-3900.md): Intel firmware PE94510M.86A.0050.2007.0710.1559 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this (no CVSS) - [CVE-2008-3901](https://cve.now/CVE-2008-3901.md): Software suspend 2 2-2.2.1, when used with the Linux kernel 2.6.16, stores pre-boot authentication passwords in the BIOS Keyboard buffer and (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-09-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.