Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2008-3908
HistorySep 04, 2008 - 5:41 p.m.

CVE-2008-3908

2008-09-0417:41:00
CWE-119
mitre
web.nvd.nist.gov
27
cve-2008-3908
buffer overflows
princeton wordnet
wn 3.0
arbitrary code execution
privilege boundaries
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.019

Percentile

88.8%

JSON

Multiple buffer overflows in Princeton WordNet (wn) 3.0 allow context-dependent attackers to execute arbitrary code via (1) a long argument on the command line; a long (2) WNSEARCHDIR, (3) WNHOME, or (4) WNDBVERSION environment variable; or (5) a user-supplied dictionary (aka data file). NOTE: since WordNet itself does not run with special privileges, this issue only crosses privilege boundaries when WordNet is invoked as a third party component.

Affected configurations

Nvd
Node
princeton_universitywordnetMatch3.0
VendorProductVersionCPE
princeton_universitywordnet3.0cpe:2.3:a:princeton_university:wordnet:3.0:*:*:*:*:*:*:*

Related

nvd 1
debiancve 1
prion 1
cbl_mariner 2
cvelist 1
nessus 4
ubuntucve 1
openvas 6
securityvulns 1
gentoo 1
osv 1
nvd
nvd
CVE-2008-3908
2008-09-04 17:41:00
debiancve
debiancve
CVE-2008-3908
2008-09-04 17:41:00
prion
prion
Buffer overflow
2008-09-04 17:41:00
cbl_mariner
cbl_mariner
CVE-2008-3908 affecting package wordnet for versions less than 3.0-43
2024-04-03 00:40:51
CVE-2008-3908 affecting package wordnet for versions less than 3.0-38
2023-02-14 22:38:48
cvelist
cvelist
CVE-2008-3908
2008-09-04 17:00:00
nessus
nessus
CBL Mariner 2.0 Security Update: wordnet (CVE-2008-3908)
2024-07-03 00:00:00
Mandriva Linux Security Advisory : wordnet (MDVSA-2008:182-1)
2009-04-23 00:00:00
GLSA-200810-01 : WordNet: Execution of arbitrary code
2008-10-08 00:00:00
ubuntucve
ubuntucve
CVE-2008-3908
2008-09-04 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200810-01 (wordnet)
2008-10-09 00:00:00
Mandriva Update for wordnet MDVSA-2008:182-1 (wordnet)
2009-04-09 00:00:00
Debian: Security Advisory (DSA-1634-1)
2008-09-24 00:00:00
securityvulns
securityvulns
WordNet library multiple buffer overflows
2008-09-02 00:00:00
gentoo
gentoo
WordNet: Execution of arbitrary code
2008-10-07 00:00:00
osv
osv
wordnet - arbitrary code execution
2008-09-01 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.019

Percentile

88.8%

JSON
Related for CVE-2008-3908
nvd1debiancve1prion1cbl_mariner2cvelist1nessus4ubuntucve1openvas6securityvulns1gentoo1osv1