# CVEs published 2008-11-18

47 CVEs were published on November 18, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-5158](https://cve.now/CVE-2008-5158.md): Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to bypass authentication and perform administrative actions v (no CVSS)
- [CVE-2008-5159](https://cve.now/CVE-2008-5159.md): Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote at (no CVSS)
- [CVE-2008-5160](https://cve.now/CVE-2008-5160.md): Unspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service (daemon crash) via multiple invalid reques (no CVSS)
- [CVE-2008-5133](https://cve.now/CVE-2008-5133.md): ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv\_96, when running on a DNS server with Network Address Translation (NAT) conf (no CVSS)
- [CVE-2008-5134](https://cve.now/CVE-2008-5134.md): Buffer overflow in the lbs\_process\_bss function in drivers/net/wireless/libertas/scan.c in the libertas subsystem in the Linux kernel before (no CVSS)
- [CVE-2008-5135](https://cve.now/CVE-2008-5135.md): os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/mounted-map or (2) /tmp/rai (no CVSS)
- [CVE-2008-5136](https://cve.now/CVE-2008-5136.md): tkusr in tkusr 0.82 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/tkusr.pgm temporary file. (no CVSS)
- [CVE-2008-5137](https://cve.now/CVE-2008-5137.md): tkman in tkman 2.2 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/tkman##### or (2) /tmp/ll temporary fi (no CVSS)
- [CVE-2008-5138](https://cve.now/CVE-2008-5138.md): passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd.##### temporary file (no CVSS)
- [CVE-2008-5139](https://cve.now/CVE-2008-5139.md): updatejail in jailer 0.4 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/#####.updatejail temporary file. (no CVSS)
- [CVE-2008-5140](https://cve.now/CVE-2008-5140.md): trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite arbitrary files via a symlin (no CVSS)
- [CVE-2008-5141](https://cve.now/CVE-2008-5141.md): flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar.##### tempor (no CVSS)
- [CVE-2008-5142](https://cve.now/CVE-2008-5142.md): sendbug in freebsd-sendpr 3.113+5.3 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pr.## (no CVSS)
- [CVE-2008-5143](https://cve.now/CVE-2008-5143.md): mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/\*.debug or (2) / (no CVSS)
- [CVE-2008-5144](https://cve.now/CVE-2008-5144.md): nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/n (no CVSS)
- [CVE-2008-5145](https://cve.now/CVE-2008-5145.md): ltpmenu in ltp 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/runltp.mainmenu.##### temporary file. (no CVSS)
- [CVE-2008-5146](https://cve.now/CVE-2008-5146.md): add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file (no CVSS)
- [CVE-2008-5147](https://cve.now/CVE-2008-5147.md): test-pipe-to-pyodconverter.org.sh in docvert 2.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/outer.odt (no CVSS)
- [CVE-2008-5148](https://cve.now/CVE-2008-5148.md): sch2eaglepos.sh in geda-gnetlist 1.4.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file. (no CVSS)
- [CVE-2008-5149](https://cve.now/CVE-2008-5149.md): fwd\_check.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file. (no CVSS)
- [CVE-2008-5150](https://cve.now/CVE-2008-5150.md): sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-\*.#####.log tem (no CVSS)
- [CVE-2008-5151](https://cve.now/CVE-2008-5151.md): test\_parser.py in mayavi 1.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/err.log temporary file. (no CVSS)
- [CVE-2008-5152](https://cve.now/CVE-2008-5152.md): inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/inmail#####.log or (2) /tmp (no CVSS)
- [CVE-2008-5153](https://cve.now/CVE-2008-5153.md): spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/spell-check-debug (no CVSS, moodle/moodle)
- [CVE-2008-5154](https://cve.now/CVE-2008-5154.md): bluetooth.rc in p3nfs 5.19 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/blue.log temporary file. (no CVSS)
- [CVE-2008-5155](https://cve.now/CVE-2008-5155.md): mail2sms.sh in smsclient 2.0.8z allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/header.##### or (2) /tmp/ (no CVSS)
- [CVE-2008-5156](https://cve.now/CVE-2008-5156.md): si\_mkbootserver in systemimager-server 3.6.3 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/\*.inetd.conf (no CVSS)
- [CVE-2008-5157](https://cve.now/CVE-2008-5157.md): tau 2.16.4 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/makefile.tau.\*.##### or (2) /tmp/makefile.tau\* (no CVSS)
- [CVE-2008-5127](https://cve.now/CVE-2008-5127.md): Ocean12 Contact Manager Pro 1.02 stores sensitive information under the web root with insufficient access control, which allows remote attac (no CVSS)
- [CVE-2008-5128](https://cve.now/CVE-2008-5128.md): Ocean12 Membership Manager Pro stores sensitive information under the web root with insufficient access control, which allows remote attacke (no CVSS)
- [CVE-2008-5129](https://cve.now/CVE-2008-5129.md): Ocean12 Poll Manager Pro 1.00 stores sensitive information under the web root with insufficient access control, which allows remote attacker (no CVSS)
- [CVE-2008-5130](https://cve.now/CVE-2008-5130.md): Ocean12 Calendar Manager Gold 2.04 stores sensitive information under the web root with insufficient access control, which allows remote att (no CVSS)
- [CVE-2008-5131](https://cve.now/CVE-2008-5131.md): Multiple SQL injection vulnerabilities in Develop It Easy News And Article System 1.4 allow remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2008-5132](https://cve.now/CVE-2008-5132.md): SQL injection vulnerability in inc/ajax/ajax\_rating.php in MemHT Portal 4.0.1 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-5126](https://cve.now/CVE-2008-5126.md): Cross-site scripting (XSS) vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2008-5114](https://cve.now/CVE-2008-5114.md): Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allow remote attac (no CVSS)
- [CVE-2008-5115](https://cve.now/CVE-2008-5115.md): Cross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attacker (no CVSS)
- [CVE-2008-5116](https://cve.now/CVE-2008-5116.md): Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allow (no CVSS)
- [CVE-2008-5117](https://cve.now/CVE-2008-5117.md): Open redirect vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to redirect users (no CVSS)
- [CVE-2008-5118](https://cve.now/CVE-2008-5118.md): Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and con (no CVSS)
- [CVE-2008-5119](https://cve.now/CVE-2008-5119.md): Cross-site scripting (XSS) vulnerability in search.php in Scripts4Profit DXShopCart 4.30mc allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2008-5120](https://cve.now/CVE-2008-5120.md): Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to exec (no CVSS)
- [CVE-2008-5121](https://cve.now/CVE-2008-5121.md): dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat W (no CVSS)
- [CVE-2008-5122](https://cve.now/CVE-2008-5122.md): SQL injection vulnerability in WorkArea/ContentRatingGraph.aspx in Ektron CMS400.NET 7.5.2 and earlier allows remote attackers to execute ar (no CVSS)
- [CVE-2008-5123](https://cve.now/CVE-2008-5123.md): SQL injection vulnerability in admin.php in CCleague Pro 1.2 allows remote attackers to execute arbitrary SQL commands via the u parameter. (no CVSS)
- [CVE-2008-5124](https://cve.now/CVE-2008-5124.md): JSCAPE Secure FTP Applet 4.8.0 and earlier does not ask the user to verify a new or mismatched SSH host key, which makes it easier for remot (no CVSS)
- [CVE-2008-5125](https://cve.now/CVE-2008-5125.md): admin.php in CCleague Pro 1.2 allows remote attackers to bypass authentication by setting the type cookie value to admin. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-11-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.