Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3425 State: PUBLISHED Published: 2009-09-25T22:00:00 Last Updated: 2024-08-07T06:31:08.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includes/inc.thcms_admin_dirtree.php in MaxCMS 3.11.20b allows remote attackers to read arbitrary files via directory traversal sequences in the thCMS_root parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9350 - http://secunia.com/advisories/36105 - http://www.vupen.com/english/advisories/2009/2136
CVE ID: CVE-2009-3426 State: PUBLISHED Published: 2009-09-25T22:00:00 Last Updated: 2024-08-07T06:31:10.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/file_manager/special.php in MaxCMS 3.11.20b allows remote attackers to execute arbitrary PHP code via a URL in the fm_includes_special parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9350 - http://secunia.com/advisories/36105 - http://www.vupen.com/english/advisories/2009/2136
CVE ID: CVE-2009-3427 State: PUBLISHED Published: 2009-09-25T22:00:00 Last Updated: 2024-08-07T06:31:09.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web script or HTML via the subject field in a ticket. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/505637/100/0/threaded - http://www.ngenuity.org/wordpress/2009/08/08/ngenuity-ticket-subject-persistent-xss-in-kayako-supportsuite/ - http://secunia.com/advisories/36253
CVE ID: CVE-2009-3428 State: PUBLISHED Published: 2009-09-25T22:00:00 Last Updated: 2024-08-07T06:31:10.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafted .wav file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36267 - http://www.exploit-db.com/exploits/9420 - http://www.exploit-db.com/exploits/9418 - http://www.exploit-db.com/exploits/9412
CVE ID: CVE-2009-3429 State: PUBLISHED Published: 2009-09-25T22:00:00 Last Updated: 2024-08-07T06:31:10.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code via a long string in a .pls playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9321
CVE ID: CVE-2009-3430 State: PUBLISHED Published: 2009-09-25T22:00:00 Last Updated: 2024-08-07T06:31:10.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Allomani Mobile 2.5 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52012 - http://www.exploit-db.com/exploits/9273 - http://www.vupen.com/english/advisories/2009/2029
CVE ID: CVE-2009-3431 State: PUBLISHED Published: 2009-09-25T23:00:00 Last Updated: 2024-08-07T06:31:09.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and earlier 9.x versions; 8.1.6 and earlier 8.x versions; and possibly 7.1.4 and earlier 7.x versions allows remote attackers to cause a denial of service (application crash) via a PDF file with a large number of [ (open square bracket) characters in the argument to the alert method. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/tec
third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6532 - http://www.vupen.com/english/advisories/2009/2898 - http://www.securityfocus.com/bid/35148
CVE ID: CVE-2009-3432 State: PUBLISHED Published: 2009-09-28T18:20:00 Last Updated: 2024-08-07T06:31:10.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in xscreensaver in Sun Solaris 10, and OpenSolaris before snv_112, when Xorg or Xnewt is used and RandR is enabled, allows physically proximate attackers to read a locked screen via unknown vectors related to XRandR resize events. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36830 - http://www.securityfocus.com/bid/36488 - http://osvdb.org/58278 - http://www.vupen.com/english/advisories/2009/2728 - http://www.securitytracker.com/id?1022936 - https://ex
b.org/58278 - http://www.vupen.com/english/advisories/2009/2728 - http://www.securitytracker.com/id?1022936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53424 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-26-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-249646-1
CVE ID: CVE-2009-3433 State: PUBLISHED Published: 2009-09-28T18:20:00 Last Updated: 2024-08-07T06:31:10.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in clsetup in the configuration utility in Sun Solaris Cluster 3.2 allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53426 - http://www.vupen.com/english/advisories/2009/2729 - http://www.securitytracker.com/id?1022937 - http://osvdb.org/58277 - http://www.securityfocus.com/bid/36486 - http://sunsolve.sun.com/search/document.do?assetkey=1-
http://osvdb.org/58277 - http://www.securityfocus.com/bid/36486 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-267148-1
CVE ID: CVE-2009-3434 State: PUBLISHED Published: 2009-09-28T22:00:00 Last Updated: 2024-08-07T06:31:09.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Tupinambis (com_tupinambis) component 1.0 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the proyecto parameter in a verproyecto action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0909-exploits/mambojoomlatupinambis-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/53454 - http://www.securityfocus.com/bid/36511 - http://www.vupen.com/english/advisories/2009/2730 - http://secunia
ties/53454 - http://www.securityfocus.com/bid/36511 - http://www.vupen.com/english/advisories/2009/2730 - http://secunia.com/advisories/36848
CVE ID: CVE-2009-3435 State: PUBLISHED Published: 2009-09-28T22:00:00 Last Updated: 2024-08-07T06:31:10.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the variable editor in the Devel module 5.x before 5.x-1.2 and 6.x before 6.x-1.18, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a variable name. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36859 - http://drupal.org/node/585952 - http://osvdb.org/58313 - http://www.securityfocus.com/bid/36508 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53449
CVE ID: CVE-2009-3436 State: PUBLISHED Published: 2009-09-28T22:00:00 Last Updated: 2024-08-07T06:31:09.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the (1) FORUM_ID or (2) CAT_ID parameter. NOTE: this might overlap CVE-2005-1417. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53435 - http://packetstormsecurity.org/0909-exploits/maxwebportal-sql.txt - http://www.securityfocus.com/bid/36480
CVE ID: CVE-2009-3437 State: PUBLISHED Published: 2009-09-28T22:00:00Z Last Updated: 2024-09-16T17:14:13.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the live preview feature in the Markdown Preview module 6.x for Drupal allows remote attackers to inject arbitrary web script or HTML via "Markdown input." Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/585790 - http://www.securityfocus.com/bid/36505
CVE ID: CVE-2009-3438 State: PUBLISHED Published: 2009-09-28T22:00:00 Last Updated: 2024-08-07T06:31:09.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JoomlaFacebook (com_facebook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a student action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53437 - http://packetstormsecurity.org/0909-exploits/joomlafb-sql.txt - http://www.securityfocus.com/bid/36484 - http://www.vupen.com/english/advisories/2009/2731
CVE ID: CVE-2009-3439 State: PUBLISHED Published: 2009-09-28T22:00:00 Last Updated: 2024-08-07T06:31:09.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Open Source Security Information Management (OSSIM) before 2.1.2 allow remote authenticated users to execute arbitrary SQL commands via the id_document parameter to (1) repository_document.php, (2) repository_links.php, and (3) repository_editdocument.php in repository/; the (4) group parameter to policy/getpolicy.php; the name parameter to (5) host/newhostgroupform.php and (6) net/modifynetform.php; and unspecified other vectors related to the policy menu. Additional Analyst Notes: -
hp and (6) net/modifynetform.php; and unspecified other vectors related to the policy menu. Additional Analyst Notes: - CVE Program Container: References: - http://dsecrg.com/pages/vul/show.php?id=155 - http://www.securityfocus.com/bid/36504 - http://secunia.com/advisories/36867 - http://www.securityfocus.com/archive/1/506663/100/0/threaded
CVE ID: CVE-2009-3440 State: PUBLISHED Published: 2009-09-28T22:00:00 Last Updated: 2024-08-07T06:31:10.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the option parameter to the default URI (aka the main menu). Additional Analyst Notes: - CVE Program Container: References: - http://dsecrg.com/pages/vul/show.php?id=155 - http://www.securityfocus.com/bid/36504 - http://secunia.com/advisories/36867 - http://www.securityfocus.com/archive/1/506663/100/0/threaded
CVE ID: CVE-2009-3441 State: PUBLISHED Published: 2009-09-28T22:00:00 Last Updated: 2024-08-07T06:31:10.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to (1) graphs/alarms_events.php or (2) host/draw_tree.php. Additional Analyst Notes: - CVE Program Container: References: - http://dsecrg.com/pages/vul/show.php?id=155 - http://www.securityfocus.com/bid/36504 - http://secunia.com/advisories/36867 - http://www.securityfocus.com/archive/1/506663/100/0/threaded
CVE ID: CVE-2009-3442 State: PUBLISHED Published: 2009-09-28T22:00:00 Last Updated: 2024-08-07T06:31:10.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Meta tags (aka Nodewords) module before 6.x-1.1 for Drupal does not properly follow permissions during assignment of node meta tags, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/585706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53452 - http://drupal.org/node/585710 - http://osvdb.org/58314 - http://secunia.com/advisories/36841 - http://www.securityfocus.com/bid/36506
CVE ID: CVE-2009-3443 State: PUBLISHED Published: 2009-09-28T22:00:00Z Last Updated: 2024-09-17T00:05:35.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Fastball (com_fastball) component 1.1.0 through 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the league parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36878 - http://packetstormsecurity.org/0909-exploits/joomlafastball-sql.txt
CVE ID: CVE-2009-3444 State: PUBLISHED Published: 2009-09-28T22:00:00 Last Updated: 2024-08-07T06:31:10.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in email.php in e107 0.7.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header in a news.1 (aka news to email) action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36832 - http://websecurity.com.ua/3528 - http://osvdb.org/58363 - http://www.securityfocus.com/bid/36517 - http://www.securitytracker.com/id?1022947 - http://www.securityfocus.com/archive/1/506704/100/0/threaded
CVE ID: CVE-2009-3445 State: PUBLISHED Published: 2009-09-28T22:00:00Z Last Updated: 2024-09-16T22:25:38.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service (daemon crash) via an IMAP4 FETCH command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36519 - http://secunia.com/advisories/36888 - http://www.code-crafters.com/abilitymailserver/updatelog.html
CVE ID: CVE-2009-3446 State: PUBLISHED Published: 2009-09-28T22:00:00 Last Updated: 2024-08-07T06:31:10.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the MyRemote Video Gallery (com_mytube) component 1.0 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter in a videos action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36470 - http://www.exploit-db.com/exploits/9733 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53401
CVE ID: CVE-2009-3447 State: PUBLISHED Published: 2009-09-29T15:00:00 Last Updated: 2024-08-07T06:31:09.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, and then sending a request for a predictable filename during a short time window. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/506555/100/0/threaded - http://secunia.com/advisories/23807 - http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339 - http://www.osvdb.org/58197 - https://www.sec
ries/23807 - http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339 - http://www.osvdb.org/58197 - https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt
CVE ID: CVE-2009-3448 State: PUBLISHED Published: 2009-09-29T15:00:00 Last Updated: 2024-08-07T06:31:10.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: npvmgr.exe in BakBone NetVault Backup 8.22 Build 29 allows remote attackers to cause a denial of service (daemon crash) via a packet to (1) TCP or (2) UDP port 20031 with a large value in an unspecified size field, which is not properly handled in a malloc operation. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022941 - http://osvdb.org/58329 - http://www.securityfocus.com/bid/36489 - http://www.insight
ww.securitytracker.com/id?1022941 - http://osvdb.org/58329 - http://www.securityfocus.com/bid/36489 - http://www.insight-tech.org/index.php?p=bakbone-netvault-backup-8-22-build-29-remote-dos - https://exchange.xforce.ibmcloud.com/vulnerabilities/53434 - http://secunia.com/advisories/36847
CVE ID: CVE-2009-3449 State: PUBLISHED Published: 2009-09-29T15:00:00 Last Updated: 2024-08-07T06:31:09.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: MP3 Collector 2.3 allows remote attackers to cause a denial of service (application crash) via a long URL in a .m3u playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9689
CVE ID: CVE-2009-3450 State: PUBLISHED Published: 2009-09-29T15:00:00 Last Updated: 2024-08-07T06:31:09.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with __ (underscore underscore) sequences, which are incompatible with an XSS protection mechanism provided by Microsoft ASP.NET. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/58195 - http://www.securityfocus.com/archive/1/506555/100/0/threaded - http://secunia.com/advisories/23807
www.osvdb.org/58195 - http://www.securityfocus.com/archive/1/506555/100/0/threaded - http://secunia.com/advisories/23807 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53348 - http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339 - https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt
CVE ID: CVE-2009-3451 State: PUBLISHED Published: 2009-09-29T15:00:00 Last Updated: 2024-08-07T06:31:10.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/506555/100/0/threaded - http://secunia.com/advisories/23807 - http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339 - https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt - http://www.osvdb.org/58196
CVE ID: CVE-2009-3452 State: PUBLISHED Published: 2009-09-29T15:00:00 Last Updated: 2024-08-07T06:31:10.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/58194 - http://www.securityfocus.com/archive/1/506555/100/0/threaded - http://secunia.com/advisories/23807 - http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339 - https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multipl
t.radactive.com/forum/Default.aspx?g=posts&t=339 - https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt
CVE ID: CVE-2009-3453 State: PUBLISHED Published: 2009-09-29T17:00:00 Last Updated: 2024-08-07T06:31:09.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Quickr 8.1.0 services for WebSphere Portal allow remote attackers to inject arbitrary web script or HTML via the filename of a .odt file in a Lotus Quickr place, related to the Library template. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022952 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO36646 - http://secunia.com/advisories/36899 - http://www-01.ibm.com/support/docview.wss?uid=swg21405163 - http:
id=swg1LO36646 - http://secunia.com/advisories/36899 - http://www-01.ibm.com/support/docview.wss?uid=swg21405163 - http://www.vupen.com/english/advisories/2009/2779 - http://osvdb.org/58384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53489 - http://www.securityfocus.com/bid/36527
CVE ID: CVE-2009-3454 State: REJECTED Published: 2009-09-29T17:00:00 Last Updated: 2009-10-15T09:00:00 Description: No description available.
CVE ID: CVE-2009-3455 State: PUBLISHED Published: 2009-09-29T17:00:00Z Last Updated: 2024-09-16T19:36:40.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari, possibly before 4.0.3, on Mac OS X does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36477 - http://www.networkworld.com/news/2009/091709-microsoft-ie-security-hole.
ces: - http://www.securityfocus.com/bid/36477 - http://www.networkworld.com/news/2009/091709-microsoft-ie-security-hole.html
CVE ID: CVE-2009-3456 State: PUBLISHED Published: 2009-09-29T17:00:00Z Last Updated: 2024-09-16T23:35:51.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome, possibly 3.0.195.21 and earlier, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: -
tails are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36479
CVE ID: CVE-2009-3457 State: PUBLISHED Published: 2009-09-29T17:00:00 Last Updated: 2024-08-07T06:31:10.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by (1) an OPTIONS request or (2) a crafted GET request, leading to a Message-handling Errors message containing a certain client intranet IP address, aka Bug ID CSCtb82159. Additional Analyst Notes: - CVE Program Container: References: - http://www.brainoverflow.org/advisories/cisco_ace_xml_gw_ip_disclosure.txt - http://www.cisco.com/en/US
r: References: - http://www.brainoverflow.org/advisories/cisco_ace_xml_gw_ip_disclosure.txt - http://www.cisco.com/en/US/products/products_security_response09186a0080af8965.html - http://seclists.org/fulldisclosure/2009/Sep/0369.html - http://www.vupen.com/english/advisories/2009/2778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53482 - http://www.securityfocus.com/archive/1/506716/100/0/threaded - http://www.securityfocus.com/bid/36522 - http://secunia.com/advisories/36879 - http://www.securitytracker.com/id?1022949