# CVEs published 2008-09-12

6 CVEs were published on September 12, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2932](https://cve.now/CVE-2008-2932.md): Heap-based buffer overflow in Red Hat adminutil 1.1.6 allows remote attackers to cause a denial of service (daemon crash) or possibly execut (no CVSS)
- [CVE-2008-3274](https://cve.now/CVE-2008-3274.md): The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey att (no CVSS)
- [CVE-2008-3529](https://cve.now/CVE-2008-3529.md): Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to (no CVSS)
- [CVE-2008-3823](https://cve.now/CVE-2008-3823.md): Cross-site scripting (XSS) vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3.2.x before 3.2.2 allows remote attackers t (no CVSS)
- [CVE-2008-3824](https://cve.now/CVE-2008-3824.md): Cross-site scripting (XSS) vulnerability in (1) Text\_Filter/Filter/xss.php in Horde 3.1.x before 3.1.9 and 3.2.x before 3.2.2 and (2) extern (no CVSS)
- [CVE-2008-3889](https://cve.now/CVE-2008-3889.md): Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux 2.6 kernel, leaks epoll file descriptors d (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-09-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.