6.5 - CVE-2008-3281

Executive Summary

Informations
Name	CVE-2008-3281	First vendor Publication	2008-08-27
Vendor	Cve	Last vendor Modification	2024-02-02

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Overall CVSS Score	6.5
Base Score	6.5	Environmental Score	6.5
impact SubScore	3.6	Temporal Score	6.5
Exploitabality Sub Score	2.8

Attack Vector	Network	Attack Complexity	Low
Privileges Required	None	User Interaction	Required
Scope	Unchanged	Confidentiality Impact	None
Integrity Impact	None	Availability Impact	High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:N/A:P)
Cvss Base Score	4.3	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3281

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-776	Unrestricted Recursive Entity References in DTDs ('XML Bomb')

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:17731

Oval ID:	oval:org.mitre.oval:def:17731
Title:	USN-644-1 -- libxml2 vulnerabilities
Description:	It was discovered that libxml2 did not correctly handle long entity names.
Family:	unix	Class:	patch
Reference(s):	USN-644-1 CVE-2008-3529 CVE-2008-3281	Version:	7
Platform(s):	Ubuntu 6.06 Ubuntu 7.04 Ubuntu 7.10 Ubuntu 8.04	Product(s):	libxml2
Definition Synopsis:
Release section Ubuntu 6.06 is installed AND libxml2 DPKG is earlier than 2.6.24.dfsg-1ubuntu1.3 AND Release section Ubuntu 7.04 is installed AND libxml2 DPKG is earlier than 2.6.27.dfsg-1ubuntu3.3 AND Release section Ubuntu 7.10 is installed AND libxml2 DPKG is earlier than 2.6.30.dfsg-2ubuntu1.3 AND Release section Ubuntu 8.04 is installed AND libxml2 DPKG is earlier than 2.6.31.dfsg-2ubuntu1.2

Definition Id: oval:org.mitre.oval:def:17756

Oval ID:	oval:org.mitre.oval:def:17756
Title:	USN-640-1 -- libxml2 vulnerability
Description:	Andreas Solberg discovered that libxml2 did not handle recursive entities safely.
Family:	unix	Class:	patch
Reference(s):	USN-640-1 CVE-2008-3281	Version:	7
Platform(s):	Ubuntu 6.06 Ubuntu 7.04 Ubuntu 7.10 Ubuntu 8.04	Product(s):	libxml2
Definition Synopsis:
Release section Ubuntu 6.06 is installed AND libxml2 DPKG is earlier than 2.6.24.dfsg-1ubuntu1.2 AND Release section Ubuntu 7.04 is installed AND libxml2 DPKG is earlier than 2.6.27.dfsg-1ubuntu3.2 AND Release section Ubuntu 7.10 is installed AND libxml2 DPKG is earlier than 2.6.30.dfsg-2ubuntu1.2 AND Release section Ubuntu 8.04 is installed AND libxml2 DPKG is earlier than 2.6.31.dfsg-2ubuntu1.1

Definition Id: oval:org.mitre.oval:def:19740

Oval ID:	oval:org.mitre.oval:def:19740
Title:	DSA-1631-1 libxml2 - denial of service
Description:	Andreas Solberg discovered that libxml2, the GNOME XML library, could be forced to recursively evaluate entities, until available CPU and memory resources were exhausted.
Family:	unix	Class:	patch
Reference(s):	DSA-1631-1 CVE-2008-3281	Version:	5
Platform(s):	Debian GNU/Linux 4.0	Product(s):	libxml2
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. AND libxml2 DPKG is earlier than 0:2.6.27.dfsg-3

Definition Id: oval:org.mitre.oval:def:21731

Oval ID:	oval:org.mitre.oval:def:21731
Title:	ELSA-2008:0836: libxml2 security update (Moderate)
Description:	libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0836-04 CVE-2008-3281	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	libxml2
Definition Synopsis:
Oracle Linux 5.x rpm test libxml2 is earlier than 0:2.6.26-2.1.2.4 AND libxml2-devel is earlier than 0:2.6.26-2.1.2.4 AND libxml2-python is earlier than 0:2.6.26-2.1.2.4

Definition Id: oval:org.mitre.oval:def:29241

Oval ID:	oval:org.mitre.oval:def:29241
Title:	RHSA-2008:0836 -- libxml2 security update (Moderate)
Description:	Updated libxml2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The original fix used in this errata caused some applications using the libxml2 library in an unexpected way to crash when used with updated libxml2 packages. We have updated the packages for Red Hat Enterprise Linux 3, 4 and 5 to use a different fix that does not break affected applications.
Family:	unix	Class:	patch
Reference(s):	RHSA-2008:0836 CESA-2008:0836-CentOS 3 CESA-2008:0836-CentOS 2 CESA-2008:0836-CentOS 5 CVE-2008-3281	Version:	3
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 3 CentOS Linux 2 CentOS Linux 5	Product(s):	libxml2
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages match section libxml2-devel is earlier than 0:2.6.26-2.1.2.4 AND libxml2 is earlier than 0:2.6.26-2.1.2.4 AND libxml2-python is earlier than 0:2.6.26-2.1.2.4 AND Red Hat Enterprise Linux 3 release section The operating system installed on the system is Red Hat Enterprise Linux 3 Packages match section libxml2 is earlier than 0:2.5.10-11 AND libxml2-devel is earlier than 0:2.5.10-11 AND libxml2-python is earlier than 0:2.5.10-11 AND Red Hat Enterprise Linux 4 release section The operating system installed on the system is Red Hat Enterprise Linux 4 Packages match section libxml2 is earlier than 0:2.6.16-12.3 AND libxml2-devel is earlier than 0:2.6.16-12.3 AND libxml2-python is earlier than 0:2.6.16-12.3 AND CentOS Linux 5 release section The operating system installed on the system is CentOS Linux 5.x Packages match section libxml2 is earlier than 0:2.6.26-2.1.2.3 AND libxml2-devel is earlier than 0:2.6.26-2.1.2.3 AND libxml2-python is earlier than 0:2.6.26-2.1.2.3

Definition Id: oval:org.mitre.oval:def:6496

Oval ID:	oval:org.mitre.oval:def:6496
Title:	Libxml2 Recursive Entity Evaluation Bug Lets Remote Users Deny Service
Description:	libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-3281	Version:	3
Platform(s):	VMWare ESX Server 3 VMWare ESX Server 3.5	Product(s):
Definition Synopsis:
IF VMWare ESX Server 3.0.3 is installed AND Patch ESX303-200810503-SG is not installed OR VMWare ESX Server 3.0.2 is installed AND Patch ESX-1006968 is not installed OR VMware ESX Server 3.5.0 is installed AND Patch ESX350-200811405-SG is not installed

Definition Id: oval:org.mitre.oval:def:7968

Oval ID:	oval:org.mitre.oval:def:7968
Title:	DSA-1631 libxml2 -- denial of service
Description:	Andreas Solberg discovered that libxml2, the GNOME XML library, could be forced to recursively evaluate entities, until available CPU and memory resources were exhausted.
Family:	unix	Class:	patch
Reference(s):	DSA-1631 CVE-2008-3281	Version:	3
Platform(s):	Debian GNU/Linux 4.0	Product(s):	libxml2
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. Architecture section Architecture independent section Installed architecture is all AND libxml2-doc is earlier than 2.6.27.dfsg-4 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section libxml2 is earlier than 2.6.27.dfsg-4 AND libxml2-dev is earlier than 2.6.27.dfsg-4 AND python-libxml2 is earlier than 2.6.27.dfsg-4 AND libxml2-dbg is earlier than 2.6.27.dfsg-4 AND libxml2-utils is earlier than 2.6.27.dfsg-4

Definition Id: oval:org.mitre.oval:def:9812

Oval ID:	oval:org.mitre.oval:def:9812
Title:	libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document.
Description:	libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-3281	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section libxml2-devel is earlier than 0:2.5.10-11 AND libxml2-python is earlier than 0:2.5.10-11 AND libxml2 is earlier than 0:2.5.10-11 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section libxml2-devel is earlier than 0:2.6.16-12.3 AND libxml2-python is earlier than 0:2.6.16-12.3 AND libxml2 is earlier than 0:2.6.16-12.3 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section libxml2-devel is earlier than 0:2.6.26-2.1.2.4 AND libxml2-python is earlier than 0:2.6.26-2.1.2.4 AND libxml2 is earlier than 0:2.6.26-2.1.2.4

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apple Safari cpe:2.3:a:apple:safari:4beta:::::::* cpe:2.3:a:apple:safari:4.0_beta::mac::::: cpe:2.3:a:apple:safari:4.0_beta:-:mac:::::* cpe:2.3:a:apple:safari:4.0_beta:528.16:::::: cpe:2.3:a:apple:safari:4:beta:windows:::::* cpe:2.3:a:apple:safari:3.2.3::windows::::: cpe:2.3:a:apple:safari:3.2.3::mac::::: cpe:2.3:a:apple:safari:3.2.3:-:windows:::::* cpe:2.3:a:apple:safari:3.2.3:-:mac:::::* cpe:2.3:a:apple:safari:3.2.3:::::::* cpe:2.3:a:apple:safari:3.2.2b:-:windows:::::* cpe:2.3:a:apple:safari:3.2.2:::::::* cpe:2.3:a:apple:safari:3.2.2:-:windows:::::* cpe:2.3:a:apple:safari:3.2.2::windows::::: cpe:2.3:a:apple:safari:3.2.1b:-:windows:::::* cpe:2.3:a:apple:safari:3.2.1:::::::* cpe:2.3:a:apple:safari:3.2.1::mac::::: cpe:2.3:a:apple:safari:3.2.1::windows::::: cpe:2.3:a:apple:safari:3.2.1:-:mac:::::* cpe:2.3:a:apple:safari:3.2.1:-:windows:::::* cpe:2.3:a:apple:safari:3.2.0b:-:windows:::::* cpe:2.3:a:apple:safari:3.2.0:::::::* cpe:2.3:a:apple:safari:3.2:::::::* cpe:2.3:a:apple:safari:3.2:-:windows:::::* cpe:2.3:a:apple:safari:3.2::windows::::: cpe:2.3:a:apple:safari:3.2:-:mac:::::* cpe:2.3:a:apple:safari:3.1.2b:-:windows:::::* cpe:2.3:a:apple:safari:3.1.2:::::::* cpe:2.3:a:apple:safari:3.1.2::mac::::: cpe:2.3:a:apple:safari:3.1.2::windows::::: cpe:2.3:a:apple:safari:3.1.2:-:mac:::::* cpe:2.3:a:apple:safari:3.1.2:-:windows:::::* cpe:2.3:a:apple:safari:3.1.1b:-:windows:::::* cpe:2.3:a:apple:safari:3.1.1:::::::* cpe:2.3:a:apple:safari:3.1.1::windows::::: cpe:2.3:a:apple:safari:3.1.1::mac::::: cpe:2.3:a:apple:safari:3.1.1:-:windows:::::* cpe:2.3:a:apple:safari:3.1.1:-:mac:::::* cpe:2.3:a:apple:safari:3.1.0b:::::::* cpe:2.3:a:apple:safari:3.1.0b:-:windows:::::* cpe:2.3:a:apple:safari:3.1.0:::::::* cpe:2.3:a:apple:safari:3.1.0:-:mac:::::* cpe:2.3:a:apple:safari:3.1:::::::* cpe:2.3:a:apple:safari:3.1::windows::::: cpe:2.3:a:apple:safari:3.1::mac::::: cpe:2.3:a:apple:safari:3.1:-:mac:::::* cpe:2.3:a:apple:safari:3.1:-:windows:::::* cpe:2.3:a:apple:safari:3.0.4b:::::::* cpe:2.3:a:apple:safari:3.0.4b:-:windows:::::* cpe:2.3:a:apple:safari:3.0.4_beta:::::::* cpe:2.3:a:apple:safari:3.0.4_beta::windows::::: cpe:2.3:a:apple:safari:3.0.4_beta::~~~windows~~::::: cpe:2.3:a:apple:safari:3.0.4:::::::* cpe:2.3:a:apple:safari:3.0.4:-:mac:::::* cpe:2.3:a:apple:safari:3.0.4::windows::::: cpe:2.3:a:apple:safari:3.0.4::mac::::: cpe:2.3:a:apple:safari:3.0.4:-:windows:::::* cpe:2.3:a:apple:safari:3.0.3b:::::::* cpe:2.3:a:apple:safari:3.0.3b:-:windows:::::* cpe:2.3:a:apple:safari:3.0.3:::::::* cpe:2.3:a:apple:safari:3.0.3:-:mac:::::* cpe:2.3:a:apple:safari:3.0.3::windows::::: cpe:2.3:a:apple:safari:3.0.3::mac::::: cpe:2.3:a:apple:safari:3.0.3:-:windows:::::* cpe:2.3:a:apple:safari:3.0.3:522.15.5:::::: cpe:2.3:a:apple:safari:3.0.3::~~~windows~~::::: cpe:2.3:a:apple:safari:3.0.2b:::::::* cpe:2.3:a:apple:safari:3.0.2b:-:windows:::::* cpe:2.3:a:apple:safari:3.0.2:::::::* cpe:2.3:a:apple:safari:3.0.2:-:mac:::::* cpe:2.3:a:apple:safari:3.0.2::windows::::: cpe:2.3:a:apple:safari:3.0.2:-:windows:::::* cpe:2.3:a:apple:safari:3.0.2::~~~windows~~::::: cpe:2.3:a:apple:safari:3.0.1b:::::::* cpe:2.3:a:apple:safari:3.0.1b:-:windows:::::* cpe:2.3:a:apple:safari:3.0.1:::::::* cpe:2.3:a:apple:safari:3.0.1:beta:::::: cpe:2.3:a:apple:safari:3.0.1:-:mac:::::* cpe:2.3:a:apple:safari:3.0.1::windows::::: cpe:2.3:a:apple:safari:3.0.1:-:windows:::::* cpe:2.3:a:apple:safari:3.0.1::~~~windows~~::::: cpe:2.3:a:apple:safari:3.0.0b:::::::* cpe:2.3:a:apple:safari:3.0.0b:-:windows:::::* cpe:2.3:a:apple:safari:3.0.0:::::::* cpe:2.3:a:apple:safari:3.0.0:-:mac:::::* cpe:2.3:a:apple:safari:3.0:::::::* cpe:2.3:a:apple:safari:3.0::windows::::: cpe:2.3:a:apple:safari:3.0::mac::::: cpe:2.3:a:apple:safari:3.0:-:windows:::::* cpe:2.3:a:apple:safari:3.0:-:mac:::::* cpe:2.3:a:apple:safari:3.0::~~~windows~~::::: cpe:2.3:a:apple:safari:3:::::::* cpe:2.3:a:apple:safari:2.0.4_419.3:::::::* cpe:2.3:a:apple:safari:2.0.4:::::::* cpe:2.3:a:apple:safari:2.0.4:-:mac:::::* cpe:2.3:a:apple:safari:2.0.4::mac::::: cpe:2.3:a:apple:safari:2.0.3_417.9.3:::::::* cpe:2.3:a:apple:safari:2.0.3_417.9.3::mac_os_x_10.4.6::::: cpe:2.3:a:apple:safari:2.0.3:417.9:::::: cpe:2.3:a:apple:safari:2.0.3:417.9.2:::::: cpe:2.3:a:apple:safari:2.0.3:417.9.3:::::: cpe:2.3:a:apple:safari:2.0.3:417.8:::::: cpe:2.3:a:apple:safari:2.0.3:::::::* cpe:2.3:a:apple:safari:2.0.3:-:mac:::::* cpe:2.3:a:apple:safari:2.0.2:::::::* cpe:2.3:a:apple:safari:2.0.2::mac::::: cpe:2.3:a:apple:safari:2.0.2:-:mac:::::* cpe:2.3:a:apple:safari:2.0.1:::::::* cpe:2.3:a:apple:safari:2.0.1:-:mac:::::* cpe:2.3:a:apple:safari:2.0.0:::::::* cpe:2.3:a:apple:safari:2.0.0:-:mac:::::* cpe:2.3:a:apple:safari:2.0_pre:::::::* cpe:2.3:a:apple:safari:2.0:::::::* cpe:2.3:a:apple:safari:2.0::mac::::: cpe:2.3:a:apple:safari:2.0:-:mac:::::* cpe:2.3:a:apple:safari:2:::::::* cpe:2.3:a:apple:safari:1.3.2:::::::* cpe:2.3:a:apple:safari:1.3.2:312.6:::::: cpe:2.3:a:apple:safari:1.3.2:312.5:::::: cpe:2.3:a:apple:safari:1.3.2::mac::::: cpe:2.3:a:apple:safari:1.3.2:-:mac:::::* cpe:2.3:a:apple:safari:1.3.1:::::::* cpe:2.3:a:apple:safari:1.3.1::mac::::: cpe:2.3:a:apple:safari:1.3.1:-:mac:::::* cpe:2.3:a:apple:safari:1.3.0:::::::* cpe:2.3:a:apple:safari:1.3:::::::* cpe:2.3:a:apple:safari:1.3::mac::::: cpe:2.3:a:apple:safari:1.3:-:mac:::::* cpe:2.3:a:apple:safari:1.2.5:::::::* cpe:2.3:a:apple:safari:1.2.5:-:mac:::::* cpe:2.3:a:apple:safari:1.2.4:::::::* cpe:2.3:a:apple:safari:1.2.4:-:mac:::::* cpe:2.3:a:apple:safari:1.2.3:::::::* cpe:2.3:a:apple:safari:1.2.3:-:mac:::::* cpe:2.3:a:apple:safari:1.2.2:::::::* cpe:2.3:a:apple:safari:1.2.2:-:mac:::::* cpe:2.3:a:apple:safari:1.2.1:::::::* cpe:2.3:a:apple:safari:1.2.1:-:mac:::::* cpe:2.3:a:apple:safari:1.2.0:::::::* cpe:2.3:a:apple:safari:1.2.0:-:mac:::::* cpe:2.3:a:apple:safari:1.2:::::::* cpe:2.3:a:apple:safari:1.2::mac::::: cpe:2.3:a:apple:safari:1.2:-:mac:::::* cpe:2.3:a:apple:safari:1.1.1:::::::* cpe:2.3:a:apple:safari:1.1.0:::::::* cpe:2.3:a:apple:safari:1.1:::::::* cpe:2.3:a:apple:safari:1.1::mac::::: cpe:2.3:a:apple:safari:1.1:-:mac:::::* cpe:2.3:a:apple:safari:1.0b1:-:mac:::::* cpe:2.3:a:apple:safari:1.0.3:::::::* cpe:2.3:a:apple:safari:1.0.3:85.8.1:::::: cpe:2.3:a:apple:safari:1.0.3:85.8:::::: cpe:2.3:a:apple:safari:1.0.3::mac::::: cpe:2.3:a:apple:safari:1.0.3:-:mac:::::* cpe:2.3:a:apple:safari:1.0.2:::::::* cpe:2.3:a:apple:safari:1.0.1:::::::* cpe:2.3:a:apple:safari:1.0.0b2:::::::* cpe:2.3:a:apple:safari:1.0.0b1:::::::* cpe:2.3:a:apple:safari:1.0.0:::::::* cpe:2.3:a:apple:safari:1.0.0:-:mac:::::* cpe:2.3:a:apple:safari:1.0:beta:::::: cpe:2.3:a:apple:safari:1.0:::::::* cpe:2.3:a:apple:safari:1.0:beta2:::::: cpe:2.3:a:apple:safari:1.0::mac::::: cpe:2.3:a:apple:safari:1.0:-:mac:::::* cpe:2.3:a:apple:safari:0.9:::::::* cpe:2.3:a:apple:safari:0.9::mac::::: cpe:2.3:a:apple:safari:0.9:-:mac:::::* cpe:2.3:a:apple:safari:0.8:::::::* cpe:2.3:a:apple:safari:0.8::mac::::: cpe:2.3:a:apple:safari:0.8:-:mac:::::* cpe:2.3:a:apple:safari:beta2:::::::* cpe:2.3:a:apple:safari:::::::: cpe:2.3:a:apple:safari:::windows:::::* cpe:2.3:a:apple:safari:-:::::::*	175
Application	Xmlsoft libxml2 cpe:2.3:a:xmlsoft:libxml2:2.6.9:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.8:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.7:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.6:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.5:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.4:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.32:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.31:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.30:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.3:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.29:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.28:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.27:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.26:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.25:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.24:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.23:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.22:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.21:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.20:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.2:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.19:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.18:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.17:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.16:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.15:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.14:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.13:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.12:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.11:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.10:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.1:::::::* cpe:2.3:a:xmlsoft:libxml2:2.6.0:::::::* cpe:2.3:a:xmlsoft:libxml2:2.5.9:::::::* cpe:2.3:a:xmlsoft:libxml2:2.5.8:::::::* cpe:2.3:a:xmlsoft:libxml2:2.5.7:::::::* cpe:2.3:a:xmlsoft:libxml2:2.5.6:::::::* cpe:2.3:a:xmlsoft:libxml2:2.5.5:::::::* cpe:2.3:a:xmlsoft:libxml2:2.5.4:::::::* cpe:2.3:a:xmlsoft:libxml2:2.5.3:::::::* cpe:2.3:a:xmlsoft:libxml2:2.5.2:::::::* cpe:2.3:a:xmlsoft:libxml2:2.5.11:::::::* cpe:2.3:a:xmlsoft:libxml2:2.5.10:::::::* cpe:2.3:a:xmlsoft:libxml2:2.5.1:::::::* cpe:2.3:a:xmlsoft:libxml2:2.5.0:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.9:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.8:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.7:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.6:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.5:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.4:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.30:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.3:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.29:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.28:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.27:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.26:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.25:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.24:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.23:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.22:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.21:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.20:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.2:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.19:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.18:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.17:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.16:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.15:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.14:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.13:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.12:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.11:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.10:::::::* cpe:2.3:a:xmlsoft:libxml2:2.4.1:::::::* cpe:2.3:a:xmlsoft:libxml2:2.3.9:::::::* cpe:2.3:a:xmlsoft:libxml2:2.3.8:::::::* cpe:2.3:a:xmlsoft:libxml2:2.3.7:::::::* cpe:2.3:a:xmlsoft:libxml2:2.3.6:::::::* cpe:2.3:a:xmlsoft:libxml2:2.3.5:::::::* cpe:2.3:a:xmlsoft:libxml2:2.3.4:::::::* cpe:2.3:a:xmlsoft:libxml2:2.3.3:::::::* cpe:2.3:a:xmlsoft:libxml2:2.3.2:::::::* cpe:2.3:a:xmlsoft:libxml2:2.3.14:::::::* cpe:2.3:a:xmlsoft:libxml2:2.3.13:::::::* cpe:2.3:a:xmlsoft:libxml2:2.3.12:::::::* cpe:2.3:a:xmlsoft:libxml2:2.3.11:::::::* cpe:2.3:a:xmlsoft:libxml2:2.3.10:::::::* cpe:2.3:a:xmlsoft:libxml2:2.3.1:::::::* cpe:2.3:a:xmlsoft:libxml2:2.3.0:::::::* cpe:2.3:a:xmlsoft:libxml2:2.2.9:::::::* cpe:2.3:a:xmlsoft:libxml2:2.2.8:::::::* cpe:2.3:a:xmlsoft:libxml2:2.2.7:::::::* cpe:2.3:a:xmlsoft:libxml2:2.2.6:::::::* cpe:2.3:a:xmlsoft:libxml2:2.2.5:::::::* cpe:2.3:a:xmlsoft:libxml2:2.2.4:::::::* cpe:2.3:a:xmlsoft:libxml2:2.2.3:::::::* cpe:2.3:a:xmlsoft:libxml2:2.2.2:::::::* cpe:2.3:a:xmlsoft:libxml2:2.2.11:::::::* cpe:2.3:a:xmlsoft:libxml2:2.2.10:::::::* cpe:2.3:a:xmlsoft:libxml2:2.2.1:::::::* cpe:2.3:a:xmlsoft:libxml2:2.2.0:beta:::::: cpe:2.3:a:xmlsoft:libxml2:2.2.0:::::::* cpe:2.3:a:xmlsoft:libxml2:2.1.1:::::::* cpe:2.3:a:xmlsoft:libxml2:2.1.0:::::::* cpe:2.3:a:xmlsoft:libxml2:2.0.0:::::::* cpe:2.3:a:xmlsoft:libxml2:1.8.9:::::::* cpe:2.3:a:xmlsoft:libxml2:1.8.7:::::::* cpe:2.3:a:xmlsoft:libxml2:1.8.6:::::::* cpe:2.3:a:xmlsoft:libxml2:1.8.5:::::::* cpe:2.3:a:xmlsoft:libxml2:1.8.4:::::::* cpe:2.3:a:xmlsoft:libxml2:1.8.3:::::::* cpe:2.3:a:xmlsoft:libxml2:1.8.2:::::::* cpe:2.3:a:xmlsoft:libxml2:1.8.16:::::::* cpe:2.3:a:xmlsoft:libxml2:1.8.14:::::::* cpe:2.3:a:xmlsoft:libxml2:1.8.13:::::::* cpe:2.3:a:xmlsoft:libxml2:1.8.10:::::::* cpe:2.3:a:xmlsoft:libxml2:1.8.1:::::::* cpe:2.3:a:xmlsoft:libxml2:1.8.0:::::::* cpe:2.3:a:xmlsoft:libxml2:1.7.4:::::::* cpe:2.3:a:xmlsoft:libxml2:1.7.3:::::::* cpe:2.3:a:xmlsoft:libxml2:1.7.2:::::::* cpe:2.3:a:xmlsoft:libxml2:1.7.1:::::::* cpe:2.3:a:xmlsoft:libxml2:1.7.0:::::::* cpe:2.3:a:xmlsoft:libxml2:::::::: cpe:2.3:a:xmlsoft:libxml2:-:::::::*	126
Os	Apple Iphone Os cpe:2.3:o:apple:iphone_os:2.2.1:::::::* cpe:2.3:o:apple:iphone_os:2.2.1:-:iphone:::::* cpe:2.3:o:apple:iphone_os:2.2.1:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:2.2:::::::* cpe:2.3:o:apple:iphone_os:2.2:-:iphone:::::* cpe:2.3:o:apple:iphone_os:2.2:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:2.1.1:::::::* cpe:2.3:o:apple:iphone_os:2.1:::::::* cpe:2.3:o:apple:iphone_os:2.1:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:2.1:-:iphone:::::* cpe:2.3:o:apple:iphone_os:2.0.2:::::::* cpe:2.3:o:apple:iphone_os:2.0.2:-:iphone:::::* cpe:2.3:o:apple:iphone_os:2.0.2:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:2.0.1:::::::* cpe:2.3:o:apple:iphone_os:2.0.1:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:2.0.1:-:iphone:::::* cpe:2.3:o:apple:iphone_os:2.0.0:::::::* cpe:2.3:o:apple:iphone_os:2.0.0:-:iphone:::::* cpe:2.3:o:apple:iphone_os:2.0.0:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:2.0:::::::* cpe:2.3:o:apple:iphone_os:1.1.5:::::::* cpe:2.3:o:apple:iphone_os:1.1.5:-:iphone:::::* cpe:2.3:o:apple:iphone_os:1.1.5:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:1.1.4:::::::* cpe:2.3:o:apple:iphone_os:1.1.4:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:1.1.4:-:iphone:::::* cpe:2.3:o:apple:iphone_os:1.1.3:::::::* cpe:2.3:o:apple:iphone_os:1.1.3:-:iphone:::::* cpe:2.3:o:apple:iphone_os:1.1.3:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:1.1.2:::::::* cpe:2.3:o:apple:iphone_os:1.1.2:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:1.1.2:-:iphone:::::* cpe:2.3:o:apple:iphone_os:1.1.1:::::::* cpe:2.3:o:apple:iphone_os:1.1.1:-:iphone:::::* cpe:2.3:o:apple:iphone_os:1.1.0:::::::* cpe:2.3:o:apple:iphone_os:1.1.0:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:1.1.0:-:iphone:::::* cpe:2.3:o:apple:iphone_os:1.1:::::::* cpe:2.3:o:apple:iphone_os:1.0.2:::::::* cpe:2.3:o:apple:iphone_os:1.0.2:-:iphone:::::* cpe:2.3:o:apple:iphone_os:1.0.1:::::::* cpe:2.3:o:apple:iphone_os:1.0.1:-:iphone:::::* cpe:2.3:o:apple:iphone_os:1.0.0:::::::* cpe:2.3:o:apple:iphone_os:1.0:::::::* cpe:2.3:o:apple:iphone_os:::::::: cpe:2.3:o:apple:iphone_os:::~~~~ipad2~:::::* cpe:2.3:o:apple:iphone_os:::~~~~iphone~:::::* cpe:2.3:o:apple:iphone_os:::~~~~ipodtouch~:::::* cpe:2.3:o:apple:iphone_os::::::ipod_touch::* cpe:2.3:o:apple:iphone_os:::::::ipad2:* cpe:2.3:o:apple:iphone_os:::::::iphone:* cpe:2.3:o:apple:iphone_os:::::::ipodtouch:* cpe:2.3:o:apple:iphone_os:-:::::::* cpe:2.3:o:apple:iphone_os:-::~~~~ipad2~::::: cpe:2.3:o:apple:iphone_os:-::~~~~iphone~::::: cpe:2.3:o:apple:iphone_os:-::~~~~ipodtouch~::::: cpe:2.3:o:apple:iphone_os:-::::::ipad2: cpe:2.3:o:apple:iphone_os:-::::::iphone: cpe:2.3:o:apple:iphone_os:-::::::ipodtouch:	59
Os	Apple Safari cpe:2.3:o:apple:safari::::::::	1
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:8.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:7.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:7.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:6.06:::::::*	4
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:4.0:::::::*	1
Os	Fedoraproject Fedora cpe:2.3:o:fedoraproject:fedora:9:::::::*	1
Os	Redhat Enterprise Linux Desktop cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:::::::* cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:::::::* cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:::::::*	3
Os	Redhat Enterprise Linux Eus cpe:2.3:o:redhat:enterprise_linux_eus:5.2:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:4.7:::::::*	2
Os	Redhat Enterprise Linux Server cpe:2.3:o:redhat:enterprise_linux_server:5.0:::::::* cpe:2.3:o:redhat:enterprise_linux_server:4.0:::::::* cpe:2.3:o:redhat:enterprise_linux_server:3.0:::::::* cpe:2.3:o:redhat:enterprise_linux_server:2.0:::::::*	4
Os	Redhat Enterprise Linux Workstation cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:::::::* cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:::::::* cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:::::::* cpe:2.3:o:redhat:enterprise_linux_workstation:2.0:::::::*	4
Os	Vmware Esx cpe:2.3:o:vmware:esx:3.0.3:::::::* cpe:2.3:o:vmware:esx:3.0.2:::::::* cpe:2.3:o:vmware:esx:2.5.5:::::::* cpe:2.3:o:vmware:esx:2.5.4:::::::*	4

OpenVAS Exploits

Date	Description
2009-10-13	Name : SLES10: Security update for libxml2 File : nvt/sles10_libxml2.nasl
2009-10-10	Name : SLES9: Security update for libxml2 File : nvt/sles9p5035440.nasl
2009-08-17	Name : Ubuntu USN-815-1 (libxml2) File : nvt/ubuntu_815_1.nasl
2009-04-09	Name : Mandriva Update for libxml2 MDVSA-2008:180 (libxml2) File : nvt/gb_mandriva_MDVSA_2008_180.nasl
2009-04-09	Name : Mandriva Update for libxml2 MDVSA-2008:192 (libxml2) File : nvt/gb_mandriva_MDVSA_2008_192.nasl
2009-04-09	Name : Mandriva Update for libxml2 MDVSA-2008:180-1 (libxml2) File : nvt/gb_mandriva_MDVSA_2008_180_1.nasl
2009-03-23	Name : Ubuntu Update for libxml2 vulnerability USN-640-1 File : nvt/gb_ubuntu_USN_640_1.nasl
2009-03-23	Name : Ubuntu Update for libxml2 vulnerabilities USN-644-1 File : nvt/gb_ubuntu_USN_644_1.nasl
2009-03-06	Name : RedHat Update for libxml2 RHSA-2008:0836-02 File : nvt/gb_RHSA-2008_0836-02_libxml2.nasl
2009-02-27	Name : CentOS Update for libxml2 CESA-2008:0836 centos3 x86_64 File : nvt/gb_CESA-2008_0836_libxml2_centos3_x86_64.nasl
2009-02-27	Name : CentOS Update for libxml2 CESA-2008:0836 centos3 i386 File : nvt/gb_CESA-2008_0836_libxml2_centos3_i386.nasl
2009-02-27	Name : CentOS Update for libxml2 CESA-2008:0836-02 centos2 i386 File : nvt/gb_CESA-2008_0836-02_libxml2_centos2_i386.nasl
2009-02-17	Name : Fedora Update for libxml2 FEDORA-2008-7395 File : nvt/gb_fedora_2008_7395_libxml2_fc9.nasl
2009-02-17	Name : Fedora Update for libxml2 FEDORA-2008-7724 File : nvt/gb_fedora_2008_7724_libxml2_fc8.nasl
2008-12-03	Name : Gentoo Security Advisory GLSA 200812-06 (libxml2) File : nvt/glsa_200812_06.nasl
2008-11-01	Name : FreeBSD Ports: libxml2 File : nvt/freebsd_libxml20.nasl
2008-09-04	Name : Debian Security Advisory DSA 1631-1 (libxml2) File : nvt/deb_1631_1.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
47636	libxml2 Crafted XML File Handling Recursion Limit DoS

Information Assurance Vulnerability Management (IAVM)

Date	Description
2008-11-06	IAVM : 2008-B-0078 - Multiple Vulnerabilities in VMware Severity : Category I - VMSKEY : V0017874

Nessus® Vulnerability Scanner

Date	Description
2014-11-26	Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2009-0018.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0836.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080821_libxml2_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12237.nasl - Type : ACT_GATHER_INFO
2009-08-12	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-815-1.nasl - Type : ACT_GATHER_INFO
2009-07-27	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2008-0017.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_0_libxml2-080905.nasl - Type : ACT_GATHER_INFO
2009-06-09	Name : The remote host contains a web browser that is affected by several vulnerabil... File : safari_4.0.nasl - Type : ACT_GATHER_INFO
2009-06-09	Name : The remote host contains a web browser that is affected by several vulnerabil... File : macosx_Safari4_0.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-192.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-180.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-644-1.nasl - Type : ACT_GATHER_INFO
2008-12-03	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200812-06.nasl - Type : ACT_GATHER_INFO
2008-10-15	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_d71da2369a9411dd8f42001c2514716c.nasl - Type : ACT_GATHER_INFO
2008-09-15	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_libxml2-5583.nasl - Type : ACT_GATHER_INFO
2008-09-15	Name : The remote openSUSE host is missing a security update. File : suse_libxml2-5586.nasl - Type : ACT_GATHER_INFO
2008-09-10	Name : The remote Fedora host is missing a security update. File : fedora_2008-7724.nasl - Type : ACT_GATHER_INFO
2008-09-10	Name : The remote Fedora host is missing a security update. File : fedora_2008-7395.nasl - Type : ACT_GATHER_INFO
2008-09-05	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-640-1.nasl - Type : ACT_GATHER_INFO
2008-08-27	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0836.nasl - Type : ACT_GATHER_INFO
2008-08-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1631.nasl - Type : ACT_GATHER_INFO
2008-08-22	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0836.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
APPLE	http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
BID	http://www.securityfocus.com/bid/30783
BUGTRAQ	http://www.securityfocus.com/archive/1/497962/100/0/threaded
CONFIRM	http://support.apple.com/kb/HT3613 http://support.apple.com/kb/HT3639 http://svn.gnome.org/viewvc/libxml2?view=revision&revision=3772 http://wiki.rpath.com/Advisories:rPSA-2008-0325 http://xmlsoft.org/news.html https://bugzilla.redhat.com/show_bug.cgi?id=458086
DEBIAN	http://www.debian.org/security/2008/dsa-1631
FEDORA	https://www.redhat.com/archives/fedora-package-announce/2008-September/msg002... https://www.redhat.com/archives/fedora-package-announce/2008-September/msg003...
GENTOO	http://security.gentoo.org/glsa/glsa-200812-06.xml
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2008:180 http://www.mandriva.com/security/advisories?name=MDVSA-2008:192
MISC	http://www.vmware.com/security/advisories/VMSA-2008-0017.html
MLIST	http://lists.vmware.com/pipermail/security-announce/2008/000039.html http://mail.gnome.org/archives/xml/2008-August/msg00034.html
OVAL	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova... https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
REDHAT	https://rhn.redhat.com/errata/RHSA-2008-0836.html
SECTRACK	http://www.securitytracker.com/id?1020728
SECUNIA	http://secunia.com/advisories/31558 http://secunia.com/advisories/31566 http://secunia.com/advisories/31590 http://secunia.com/advisories/31728 http://secunia.com/advisories/31748 http://secunia.com/advisories/31855 http://secunia.com/advisories/31982 http://secunia.com/advisories/32488 http://secunia.com/advisories/32807 http://secunia.com/advisories/32974 http://secunia.com/advisories/35379
SUSE	http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
UBUNTU	http://www.ubuntu.com/usn/usn-640-1 https://usn.ubuntu.com/644-1/
VUPEN	http://www.vupen.com/english/advisories/2008/2419 http://www.vupen.com/english/advisories/2008/2843 http://www.vupen.com/english/advisories/2008/2971 http://www.vupen.com/english/advisories/2009/1522 http://www.vupen.com/english/advisories/2009/1621

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-02-02 21:28:25	Multiple Updates
2021-05-04 12:07:49	Multiple Updates
2021-04-22 01:08:12	Multiple Updates
2020-05-23 01:39:44	Multiple Updates
2020-05-23 00:22:00	Multiple Updates
2019-07-03 01:02:10	Multiple Updates
2018-10-12 00:20:25	Multiple Updates
2018-10-04 00:19:32	Multiple Updates
2017-09-29 09:23:39	Multiple Updates
2016-04-26 17:39:38	Multiple Updates
2014-11-27 13:27:21	Multiple Updates
2014-02-17 10:45:49	Multiple Updates
2013-11-11 12:38:00	Multiple Updates
2013-05-11 00:22:04	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	8
CPE ID(s)	384
Sources(s)	42
osvdb(s)	1
Openvas Exploit(s)	17
IAVM(s)	1
Nessus® Exploit(s)	22

	Related
10	VMSA-2008-0017
10	USN-644-1
10	MDVSA-2008:192
10	GLSA-200812-06
4.3	USN-640-1
4.3	RHSA-2008:0836
4.3	MDVSA-2008:180-1
4.3	MDVSA-2008:180
4.3	DSA-1631
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 9 more Alert(s)

6.5 - CVE-2008-3281

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Information Assurance Vulnerability Management (IAVM)

Nessus® Vulnerability Scanner

Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU