CVE

Id
35037  
CVE No.
CVE-2008-4920  
Status
Candidate  
Description
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate was based on an incorrect claim regarding a directory issue in Agavi. The vendor has disputed the issue and the original researcher has retracted the original claim, so this is not a vulnerability. Further investigation by the vendor and original researcher show that the original issue was in a site-specific modification, which is outside the scope of CVE. Notes: CVE users should not use this identifier.  
Phase
Assigned (20081104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
383427 35037 CVE-2008-4920 MISC:http://blog.agavi.org/post/58189391/false-agavi-vulnerability-reports  View
383428 35037 CVE-2008-4920 MILW0RM:6970  View
383429 35037 CVE-2008-4920 URL:http://www.milw0rm.com/exploits/6970  View
383430 35037 CVE-2008-4920 VIM:20081106 Vendor dispute / researcher retraction: Agavi (CVE-2008-4920)  View
383431 35037 CVE-2008-4920 URL:http://www.attrition.org/pipermail/vim/2008-November/002090.html  View
383432 35037 CVE-2008-4920 BID:32086  View
383433 35037 CVE-2008-4920 URL:http://www.securityfocus.com/bid/32086  View
383434 35037 CVE-2008-4920 OSVDB:49566  View
383435 35037 CVE-2008-4920 URL:http://osvdb.org/49566  View
383436 35037 CVE-2008-4920 SREASON:4557  View
383437 35037 CVE-2008-4920 URL:http://securityreason.com/securityalert/4557  View
383438 35037 CVE-2008-4920 XF:agavi-index-directory-traversal(46318)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49708 JVNDB-2008-005018 BARCODELib.MW6Barcode などにおける任意のファイルを上書きされる脆弱性 MW6 Technologies 1D Barcode ActiveX コントロール (BARCODELib.MW6Barcode、Barcode.dll) は、安全でないメソッドにより、任意のファイルを上書きされる脆弱性が存在します。 CVE-2008-4924 35037 9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005018.html  View