Security Vulnerabilities Published In 2008(Gain Privilege)

2008 : January February March April May June July August September October November December

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2008-5746	59		+Priv	2008-12-29	2017-08-08	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Sun SNMP Management Agent (SUNWmasf) 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files.
2	CVE-2008-5736	264	1	+Priv	2008-12-26	2019-08-02	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p1, 7.0 before 7.0-RELEASE-p7, 7.1 before 7.1-RC2, and 7 before 7.1-PRERELEASE allow local users to gain privileges via unknown attack vectors related to function pointers that are "not properly initialized" for (1) netgraph sockets and (2) bluetooth sockets.
3	CVE-2008-5731	399		DoS +Priv	2008-12-26	2018-10-11	4.9	None	Local	Low	Not required	None	None	Complete
The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service (system crash) and possibly gain privileges via a certain METHOD_BUFFERED IOCTL request that overwrites portions of memory, related to a "Driver Collapse." NOTE: some of these details are obtained from third party information.
4	CVE-2008-5725	264		+Priv	2008-12-26	2017-09-29	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory.
5	CVE-2008-5724	264		+Priv	2008-12-26	2017-08-08	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to \Device\Epfw that overwrites portions of memory.
6	CVE-2008-5699	264		+Priv +Info	2008-12-22	2009-01-06	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The name service cache daemon (nscd) in Sun Solaris 10 and OpenSolaris snv_50 through snv_104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive information via unspecified vectors.
7	CVE-2008-5397	264		+Priv	2008-12-09	2017-08-08	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process.
8	CVE-2008-5387	119		Overflow +Priv	2008-12-09	2017-09-29	6.2	None	Local	High	Not required	Complete	Complete	Complete
Buffer overflow in autoconf6 in IBM AIX 6.1.0 through 6.1.2, when Role-Based Access Control is enabled, allows local users with aix.network.config.tcpip authorization to gain privileges via unspecified vectors.
9	CVE-2008-5386	119		Overflow +Priv	2008-12-09	2008-12-17	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Buffer overflow in ndp in IBM AIX 6.1.0 through 6.1.2, when the netcd daemon is running, allows local users to gain privileges via unspecified vectors.
10	CVE-2008-5384	264		+Priv	2008-12-09	2017-09-29	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
crontab in bos.rte.cron in IBM AIX 6.1.0 through 6.1.2 allows local users with aix.system.config.cron authorization to gain privileges by launching an editor.
11	CVE-2008-5352	189		Overflow +Priv	2008-12-05	2017-09-29	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JAR file that triggers a heap-based buffer overflow.
12	CVE-2008-5347	264		+Priv	2008-12-05	2017-09-29	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple unspecified vulnerabilities in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier allow untrusted applets and applications to gain privileges via vectors related to access to inner classes in the (1) JAX-WS and (2) JAXB packages.
13	CVE-2008-5340	264		+Priv	2008-12-05	2017-09-29	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications via unknown vectors, aka 6727081.
14	CVE-2008-5229	119		DoS Overflow +Priv	2008-11-25	2018-10-11	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Stack-based buffer overflow in Microsoft Device IO Control in iphlpapi.dll in Microsoft Windows Vista Gold and SP1 allows local users in the Network Configuration Operator group to gain privileges or cause a denial of service (system crash) via a large invalid PrefixLength to the CreateIpForwardEntry2 method, as demonstrated by a "route add" command. NOTE: this issue might not cross privilege boundaries.
15	CVE-2008-5182	362		+Priv	2008-11-21	2018-10-11	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount.
16	CVE-2008-5121	264		+Priv	2008-11-18	2017-09-29	7.2	None	Local	Low	Not required	Complete	Complete	Complete
dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat WinProxy, and (3) SafeNet SoftRemote and HighAssurance Remote, allows local users to gain privileges via a crafted DNE_IOCTL DeviceIoControl request to the \\.\DNE device interface.
17	CVE-2008-5099	200		+Priv Bypass +Info	2008-11-17	2017-08-08	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Sun Logical Domain Manager (aka LDoms Manager or ldm) 1.0 through 1.0.3 displays the value of the OpenBoot PROM (OBP) security-password variable in cleartext, which allows local users to bypass the SPARC firmware's password protection, and gain privileges or obtain data access, via the "ldm ls -l" command, a different vulnerability than CVE-2008-4992.
18	CVE-2008-5049	119		Overflow +Priv	2008-11-13	2017-09-29	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Buffer overflow in AKEProtect.sys 3.3.3.0 in ISecSoft Anti-Keylogger Elite 3.3.0 and earlier, and possibly other versions including 3.3.3, allows local users to gain privileges via long inputs to the (1) 0x002224A4, (2) 0x002224C0, and (3) 0x002224CC IOCTL.
19	CVE-2008-5005	119		Exec Code Overflow +Priv	2008-11-10	2018-10-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and earlier, and (3) Panda IMAP allow (a) local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail program; and (b) remote attackers to execute arbitrary code by sending e-mail to a destination mailbox name composed of a username and '+' character followed by a long string, processed by the tmail or possibly dmail program.
20	CVE-2008-4921	264		+Priv Bypass	2008-11-04	2017-09-29	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
board/admin/reguser.php in Chipmunk CMS 1.3 allows remote attackers to bypass authentication and gain administrator privileges via a direct request. NOTE: some of these details are obtained from third party information.
21	CVE-2008-4915	264		+Priv	2008-11-10	2018-11-02	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through 2.0.5 and earlier, and 1.0.x through 1.0.7; Server 1.0.x through 1.0.7; ESX 2.5.4 through 3.5; and ESXi 3.5, when running 32-bit and 64-bit guest operating systems, does not properly handle the Trap flag, which allows authenticated guest OS users to gain privileges on the guest OS.
22	CVE-2008-4831	264		+Priv Bypass +Info	2008-11-10	2011-03-08	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Unspecified vulnerability in Adobe ColdFusion 8 and 8.0.1 and ColdFusion MX 7.0.2 allows local users to bypass sandbox restrictions, and obtain sensitive information or possibly gain privileges, via unknown vectors.
23	CVE-2008-4815	264		+Priv	2008-11-05	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH.
24	CVE-2008-4676	264		+Priv	2008-10-22	2017-08-08	6.8	None	Local	Low	???	Complete	Complete	Complete
Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file. NOTE: this might be the same issue as CVE-2008-3485, but the vendor advisory is too vague to be certain.
25	CVE-2008-4646	255		+Priv	2008-10-22	2011-03-08	2.1	None	Local	Low	Not required	Partial	None	None
The Websense Reporter Module in Websense Enterprise 6.3.2 stores the SQL database system administrator password in plaintext in CreateDbInstall.log, which allows local users to gain privileges to the database.
26	CVE-2008-4636	20		+Priv	2008-11-27	2018-10-30	7.2	None	Local	Low	Not required	Complete	Complete	Complete
yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process.
27	CVE-2008-4597	264		+Priv	2008-10-17	2017-08-08	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Shindig-Integrator 5.x, a module for Drupal, does not properly restrict generated page access, which allows remote attackers to gain privileges via unspecified vectors.
28	CVE-2008-4539	119		Overflow +Priv	2008-12-29	2021-05-14	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.
29	CVE-2008-4414	264		+Priv	2008-11-07	2017-08-08	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Unspecified vulnerability in the AdvFS showfile command in HP Tru64 UNIX 5.1B-3 and 5.1B-4 allows local users to gain privileges via unspecified vectors.
30	CVE-2008-4339	264		+Priv	2008-09-30	2017-08-08	6.5	None	Remote	Low	???	Partial	Partial	Partial
Unspecified vulnerability in the Java Administration GUI (jnbSA) in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to "bpjava* binaries."
31	CVE-2008-4281	22		+Priv Dir. Trav.	2008-11-10	2018-10-11	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Directory traversal vulnerability in VMWare ESXi 3.5 before ESXe350-200810401-O-UG and ESX 3.5 before ESX350-200810201-UG allows administrators with the Datastore.FileManagement privilege to gain privileges via unknown vectors.
32	CVE-2008-4279	264		+Priv	2008-10-06	2018-11-02	6.8	None	Local	Low	???	Complete	Complete	Complete
The CPU hardware emulation for 64-bit guest operating systems in VMware Workstation 6.0.x before 6.0.5 build 109488 and 5.x before 5.5.8 build 108000; Player 2.0.x before 2.0.5 build 109488 and 1.x before 1.0.8; Server 1.x before 1.0.7 build 108231; and ESX 2.5.4 through 3.5 allows authenticated guest OS users to gain additional guest OS privileges by triggering an exception that causes the virtual CPU to perform an indirect jump to a non-canonical address.
33	CVE-2008-4218	189		Overflow +Priv	2008-12-17	2011-03-08	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Multiple integer overflows in the kernel in Apple Mac OS X before 10.5.6 on Intel platforms allow local users to gain privileges via a crafted call to (1) i386_set_ldt or (2) i386_get_ldt.
34	CVE-2008-4210	264		+Priv +Info	2008-09-29	2017-09-29	4.6	None	Local	Low	Not required	Partial	Partial	Partial
fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.
35	CVE-2008-4131	264		+Priv	2008-09-19	2017-09-29	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Multiple unspecified vulnerabilities in Sun Solaris 8 through 10 allow local users to gain privileges via vectors related to handling of tags with (1) the -t option and (2) the :tag command in the (a) vi, (b) ex, (c) vedit, (d) view, and (e) edit programs.
36	CVE-2008-4052	119		DoS Overflow +Priv	2008-09-11	2017-08-08	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Stack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 allows local users to cause a denial of service (crash) or gain privileges via unspecified vectors.
37	CVE-2008-4036	189		Overflow +Priv	2008-10-15	2019-02-26	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual Address Descriptors (VADs) and a "memory allocation mapping error," aka "Virtual Address Descriptor Elevation of Privilege Vulnerability."
38	CVE-2008-4018	264		+Priv	2008-09-11	2017-09-29	7.2	None	Local	Low	Not required	Complete	Complete	Complete
swcons in bos.rte.console in IBM AIX 5.2.0 through 6.1.1 allows local users in the system group to create or overwrite an arbitrary file, and establish weak permissions and root ownership for this file, via unspecified vectors. NOTE: this can be leveraged to gain privileges. NOTE: this issue exists because of an incomplete fix for CVE-2007-5805.
39	CVE-2008-3947	20		+Priv	2008-09-05	2017-08-08	7.2	None	Local	Low	Not required	Complete	Complete	Complete
DCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line.
40	CVE-2008-3940	134		+Priv	2008-09-05	2017-08-08	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a (1) .plan or (2) .project file.
41	CVE-2008-3890	264		+Priv	2008-09-05	2017-08-08	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The kernel in FreeBSD 6.3 through 7.0 on amd64 platforms can make an extra swapgs call after a General Protection Fault (GPF), which allows local users to gain privileges by triggering a GPF during the kernel's return from (1) an interrupt, (2) a trap, or (3) a system call.
42	CVE-2008-3855	264		+Priv	2008-08-28	2017-08-08	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Unspecified vulnerability in the DB2 Administration Server (DAS) in the Core DAS function component in IBM DB2 9.1 before Fixpak 5 allows local users to gain privileges, aka a "FILE CREATION VULNERABILITY." NOTE: this may be the same as CVE-2007-5664.
43	CVE-2008-3833	264		+Priv +Info	2008-10-03	2023-02-13	4.9	None	Local	Low	Not required	Complete	None	None
The generic_file_splice_write function in fs/splice.c in the Linux kernel before 2.6.19 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by splicing into an inode in order to create an executable file in a setgid directory, a different vulnerability than CVE-2008-4210.
44	CVE-2008-3825	264		+Priv	2008-10-03	2018-10-11	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename and running the (1) su or (2) sudo program. NOTE: there may be a related vector involving sshd that has limited relevance.
45	CVE-2008-3778	264		DoS +Priv	2008-08-25	2017-08-08	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, proceeds with Core router updates even when a login is invalid, which allows remote attackers to cause a denial of service (messaging outage) or gain privileges via an update request.
46	CVE-2008-3698	264		+Priv	2008-09-03	2018-10-31	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Unspecified vulnerability in the OpenProcess function in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 on Windows allows local host OS users to gain privileges on the host OS via unknown vectors.
47	CVE-2008-3636	189		Overflow +Priv	2008-09-11	2018-10-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Integer overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP, Server 2003, and Vista allows context-dependent attackers to gain privileges. NOTE: this issue was originally reported for GEARAspiWDM.sys 2.0.7.5 in Gear Software CD DVD Filter driver before 4.001.7, as used in other products including Apple iTunes and multiple Symantec and Norton products, which allows local users to gain privileges via repeated IoAttachDevice IOCTL calls to \\.\GEARAspiWDMDevice in this GEARAspiWDM.sys. However, the root cause is the integer overflow in the API call itself.
48	CVE-2008-3531	119		Overflow +Priv	2008-09-05	2017-08-08	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Stack-based buffer overflow in sys/kern/vfs_mount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled, allows local users to gain privileges via a crafted (1) mount or (2) nmount system call, related to copying of "user defined data" in "certain error conditions."
49	CVE-2008-3527	264		DoS +Priv	2008-11-05	2023-02-13	4.6	None	Local	Low	Not required	Partial	Partial	Partial
arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel before 2.6.21 does not properly check boundaries, which allows local users to gain privileges or cause a denial of service via unspecified vectors, related to the install_special_mapping, syscall, and syscall32_nopage functions.
50	CVE-2008-3485	264		+Priv	2008-08-06	2018-10-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Untrusted search path vulnerability in Citrix MetaFrame Presentation Server allows local users to gain privileges via a malicious icabar.exe placed in the search path.

Total number of vulnerabilities : 188 Page : 1 (This Page)2 3 4