Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
VN49083120/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54750 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000075.html - http://www.transware.co.jp/support_am/security/vulnerability2.html
CVE ID: CVE-2009-4353 State: PUBLISHED Published: 2009-12-17T18:00:00 Last Updated: 2024-08-07T07:01:20.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mobile Edition of TransWARE Active! mail 2003 build 2003.0139.0871 and earlier, and possibly other versions before 2003.0139.0911, does not remove the session ID in a Referer URL, which allows remote attackers to hijack web sessions via vectors such as an email with an embedded URL. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN85821104/index.html - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000076.html - http://www.transware.co.jp/support_am/security/vulnerability3.html - htt
vn.jp/en/contents/2009/JVNDB-2009-000076.html - http://www.transware.co.jp/support_am/security/vulnerability3.html - http://secunia.com/advisories/37602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54751
CVE ID: CVE-2009-4354 State: PUBLISHED Published: 2009-12-17T18:00:00 Last Updated: 2024-08-07T07:01:20.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: TransWARE Active! mail 2003 build 2003.0139.0871 and earlier does not properly secure the session ID in a session cookie, which allows remote attackers to hijack web sessions, probably related to the "secure" flag for cookies in SSL sessions. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN36207497/index.html - http://www.transware.co.jp/support_am/security/vulnerability1.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54752 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-0
y1.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54752 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000077.html
CVE ID: CVE-2009-4355 State: PUBLISHED Published: 2010-01-14T19:00:00 Last Updated: 2024-08-07T07:01:19.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cleanup_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2010/dsa-1970 - http://www.vupen.com/engl
t Notes: - CVE Program Container: References: - http://www.debian.org/security/2010/dsa-1970 - http://www.vupen.com/english/advisories/2010/0916 - http://cvs.openssl.org/chngview?cn=19167 - http://secunia.com/advisories/42724 - http://secunia.com/advisories/39461 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11260 - https://bugzilla.redhat.com/show_bug.cgi?id=546707 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049 - http://secunia.com/advisories/38761 - http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0004 - http://secu
curity.663049 - http://secunia.com/advisories/38761 - http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0004 - http://secunia.com/advisories/38181 - http://secunia.com/advisories/38200 - https://issues.rpath.com/browse/RPL-3157 - http://www.vupen.com/english/advisories/2010/0839 - http://cvs.openssl.org/chngview?cn=19069 - http://marc.info/?l=bugtraq&m=127128920008563&w=2 - http://cvs.openssl.org/chngview?cn=19068 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:022 - https://rhn.redhat.com/errata/RHSA-2010-0095.html - http://www.ubuntu.com/usn/USN-884-1 - http://marc.info/?l=bugtraq&m=127128920008563&w=2 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html
/marc.info/?l=bugtraq&m=127128920008563&w=2 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - http://www.openwall.com/lists/oss-security/2010/01/13/3 - https://kb.bluecoat.com/index?page=content&id=SA50 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6678 - http://secunia.com/advisories/42733 - http://www.vupen.com/english/advisories/2010/0124 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html - http://secunia.com/advisories/38175 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12168
CVE ID: CVE-2009-4356 State: PUBLISHED Published: 2009-12-18T19:00:00 Last Updated: 2024-08-07T07:01:20.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute arbitrary code via malformed (1) JPEG or (2) PNG data in an MP3 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/508532/100/0/threaded - http://forums.winamp.com/showthread.php?threadid=315355 - http://www.vupen.com/english/advisories/2009/3576 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15743 - http://www
es/2009/3576 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15743 - http://www.vupen.com/exploits/Winamp_png_w5s_PNG_Data_Processing_Integer_Overflow_PoC_3576274.php - http://www.securityfocus.com/bid/37387
CVE ID: CVE-2009-4357 State: PUBLISHED Published: 2009-12-18T19:00:00Z Last Updated: 2024-09-17T03:59:45.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023370 - http://www.securityfocus.com/bid/37385 - http://secunia.com/advisories/37811 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK86377 - http://www.vupen.com/english/advisories/2009/3580
CVE ID: CVE-2009-4358 State: PUBLISHED Published: 2009-12-20T02:00:00Z Last Updated: 2024-09-16T18:55:18.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: freebsd-update in FreeBSD 8.0, 7.2, 7.1, 6.4, and 6.3 uses insecure permissions in its working directory (/var/db/freebsd-update by default), which allows local users to read copies of sensitive files after a (1) freebsd-update fetch (fetch) or (2) freebsd-update upgrade (upgrade) operation. Additional Analyst Notes: - CVE Program Container: References: - http://security.freebsd.org/advisories/FreeBSD-SA-09:17.freebsd-update.asc - http://www.securityfocus.com/bid/37190 - http://secunia.com/advisories/37575
CVE ID: CVE-2009-4359 State: PUBLISHED Published: 2009-12-20T02:00:00 Last Updated: 2024-08-07T07:01:20.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in folder.php in the SmartMedia 0.85 Beta module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the categoryid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37156 - http://www.packetstormsecurity.org/0911-exploits/xoopssmartmedia-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/54488
CVE ID: CVE-2009-4360 State: PUBLISHED Published: 2009-12-20T02:00:00 Last Updated: 2024-08-07T07:01:20.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/content/index.php in the Content module 0.5 for XOOPS allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetstormsecurity.org/0911-exploits/xoopscontent-sql.txt - http://securityreason.com/exploitalert/7494 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54489 - http://www.securityfocus.com/bid/37155
CVE ID: CVE-2009-4361 State: PUBLISHED Published: 2009-12-21T16:00:00Z Last Updated: 2024-09-16T16:37:56.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in qoslist in IBM AIX 6.1 allow local users to cause a denial of service (application crash) or possibly gain privileges via a long string argument. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=isg1IZ66917 - http://secunia.com/advisories/37833 - http://www.ibm.com/support/docview.wss?uid=isg1IZ66966 - http://www.vupen.com/english/advisories/2009/3600 - http://www.secur
//www.ibm.com/support/docview.wss?uid=isg1IZ66966 - http://www.vupen.com/english/advisories/2009/3600 - http://www.securityfocus.com/bid/37413
CVE ID: CVE-2009-4362 State: PUBLISHED Published: 2009-12-21T16:00:00Z Last Updated: 2024-09-16T19:46:11.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in qosmod in IBM AIX 6.1 allow local users to cause a denial of service (application crash) or possibly gain privileges via long string arguments. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=isg1IZ66918 - http://secunia.com/advisories/37833 - http://www.securityfocus.com/bid/37412 - http://www.vupen.com/english/advisories/2009/3600 - http://www.ibm.com/support/docview
www.securityfocus.com/bid/37412 - http://www.vupen.com/english/advisories/2009/3600 - http://www.ibm.com/support/docview.wss?uid=isg1IZ66967
CVE ID: CVE-2009-4363 State: PUBLISHED Published: 2009-12-21T16:00:00Z Last Updated: 2024-09-17T01:20:38.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Text_Filter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 does not properly handle data: URIs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via data:text/html values for the HREF attribute of an A element in an HTML e-mail message. NOTE: the vendor states that the issue is caused by "an XSS vulnerability in Firefox browsers." Additional Analyst Notes: - CVE Program Container: References: -
s caused by "an XSS vulnerability in Firefox browsers." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=horde-announce&m=126100750018478&w=2 - http://lists.horde.org/archives/announce/2009/000529.html - http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.559&r2=1.515.2.589&ty=h - http://bugs.horde.org/view.php?actionID=view_file&type=patch&file=0002-Bug-8715-Fix-XSS-vulnerability%5B1%5D.patch&ticket=8715 - http://marc.info/?l=horde-announce&m=126101076422179&w=2 - http://bugs.horde.org/ticket/8715 - http://securitytracker.com/id?1023365
CVE ID: CVE-2009-4364 State: PUBLISHED Published: 2009-12-21T16:00:00 Last Updated: 2024-08-07T07:01:20.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog allows remote attackers to inject arbitrary web script or HTML via the cname parameter, related to the act and id parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/61113 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54896 - http://secunia.com/advisories/37743
CVE ID: CVE-2009-4365 State: PUBLISHED Published: 2009-12-21T16:00:00 Last Updated: 2024-08-07T07:01:20.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ScriptsEz Ez Blog 1.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add a blog via the add_blog action, (2) approve a comment via the approve_comment action, (3) change administrator information including the password via the admin_opt action, and (4) delete a blog via the delete action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/61114 - https://exchange.xforce.ibmcloud
ditional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/61114 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54895 - http://packetstormsecurity.org/0912-exploits/ezblog-xssxsrf.txt - http://secunia.com/advisories/37743
CVE ID: CVE-2009-4366 State: PUBLISHED Published: 2009-12-21T16:00:00 Last Updated: 2024-08-07T07:01:20.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog 1.0 allows remote attackers to inject arbitrary web script or HTML via the yr parameter in a bmonth action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/61113 - http://packetstormsecurity.org/0912-exploits/ezblog-xssxsrf.txt - http://secunia.com/advisories/37743 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54894
CVE ID: CVE-2009-4367 State: PUBLISHED Published: 2009-12-21T16:00:00 Last Updated: 2024-08-07T07:01:20.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Staging Webservice ("sitecore modules/staging/service/api.asmx") in Sitecore Staging Module 5.4.0 rev.080625 and earlier allows remote attackers to bypass authentication and (1) upload files, (2) download files, (3) list directories, and (4) clear the server cache via crafted SOAP requests with arbitrary Username and Password values, possibly related to a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10513 - http://secunia.com/advisories/37763 - http://w
ogram Container: References: - http://www.exploit-db.com/exploits/10513 - http://secunia.com/advisories/37763 - http://www.securityfocus.com/archive/1/508529/100/0/threaded - https://www.sec-consult.com/files/20091217-0_sitecore_StagingModule_1.0.txt - http://www.securityfocus.com/bid/37388 - http://osvdb.org/61147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54881
CVE ID: CVE-2009-4368 State: PUBLISHED Published: 2009-12-21T16:00:00 Last Updated: 2024-08-07T07:01:20.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the (1) ping tool, (2) traceroute tool, and (3) ldap import, possibly related to improper authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37383 - http://www.vupen.com/english/advisories/2009/3578 - http://www.centreon.com/Development/changelog-2x.html - http://osvdb.org/61183 - http://secunia.com/advisories/37808 - https://exchange.xforce.ibmcloud.com/vulnerab
g-2x.html - http://osvdb.org/61183 - http://secunia.com/advisories/37808 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54893
CVE ID: CVE-2009-4369 State: PUBLISHED Published: 2009-12-21T16:00:00 Last Updated: 2024-08-07T07:01:20.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Contact module (modules/contact/contact.admin.inc or modules/contact/contact.module) in Drupal Core 5.x before 5.21 and 6.x before 6.15 allows remote authenticated users with "administer site-wide contact form" permissions to inject arbitrary web script or HTML via the contact category name. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/files/sa-core-2009-009/SA-CORE-2009-009-6.14.patch - http://drupal.org/node/661586 - http://www.securityfocu
/drupal.org/files/sa-core-2009-009/SA-CORE-2009-009-6.14.patch - http://drupal.org/node/661586 - http://www.securityfocus.com/bid/37372 - http://secunia.com/advisories/37824 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54867 - http://www.madirish.net/?article=441 - http://secunia.com/advisories/37815
CVE ID: CVE-2009-4370 State: PUBLISHED Published: 2009-12-21T16:00:00 Last Updated: 2024-08-07T07:01:20.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Menu module (modules/menu/menu.admin.inc) in Drupal Core 6.x before 6.15 allows remote authenticated users with permissions to create new menus to inject arbitrary web script or HTML via a menu description, which is not properly handled in the menu administration overview. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/files/sa-core-2009-009/SA-CORE-2009-009-6.14.patch - http://drupal.org/node/661586 - http://www.securityfocus.com/bid/37372 - h
a-core-2009-009/SA-CORE-2009-009-6.14.patch - http://drupal.org/node/661586 - http://www.securityfocus.com/bid/37372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54872 - http://secunia.com/advisories/37815
CVE ID: CVE-2009-4371 State: PUBLISHED Published: 2009-12-21T16:00:00 Last Updated: 2024-08-07T07:01:20.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Locale module (modules/locale/locale.module) in Drupal Core 6.14, and possibly other versions including 6.15, allows remote authenticated users with "administer languages" permissions to inject arbitrary web script or HTML via the (1) Language name in English or (2) Native language name fields in the Custom language form. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54873 - http://secunia.com/advisories/3782
Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54873 - http://secunia.com/advisories/37825 - http://www.madirish.net/?article=442
CVE ID: CVE-2009-4372 State: PUBLISHED Published: 2009-12-21T16:00:00 Last Updated: 2024-08-07T07:01:20.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary commands via shell metacharacters in the uniqueid parameter to (1) wcl.php, (2) storage_graphs.php, (3) storage_graphs2.php, (4) storage_graphs3.php, and (5) storage_graphs4.php in sem/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54843 - http://osvdb.org/61151 - http://secunia.com/advisories/37727
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/54843 - http://osvdb.org/61151 - http://secunia.com/advisories/37727 - http://www.alienvault.com/community.php?section=News - http://www.securityfocus.com/bid/37375 - http://osvdb.org/61152 - http://osvdb.org/61153 - http://www.cybsec.com/vuln/OSSIM_2_1_5_Remote_Command_Execution.pdf - http://osvdb.org/61154 - http://www.exploit-db.com/exploits/10480 - http://osvdb.org/61155
CVE ID: CVE-2009-4373 State: PUBLISHED Published: 2009-12-21T16:00:00Z Last Updated: 2024-09-16T18:34:56.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in ossiminstall/uploads/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37727 - http://www.alienvault.com/community.php?section=News -
m Container: References: - http://secunia.com/advisories/37727 - http://www.alienvault.com/community.php?section=News - http://www.cybsec.com/vuln/OSSIM_2_1_5%20_Arbitrary_File_Upload.pdf
CVE ID: CVE-2009-4374 State: PUBLISHED Published: 2009-12-21T16:00:00Z Last Updated: 2024-09-17T01:50:58.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to upload files into arbitrary directories via a .. (dot dot) in the id_document parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37727 - http://www.cybsec.com/vuln/OSSIM_2_1_5%20_Arbitrary_File_Upload.pdf - http://www.alienvault.com/community.php?section=New
ttp://www.cybsec.com/vuln/OSSIM_2_1_5%20_Arbitrary_File_Upload.pdf - http://www.alienvault.com/community.php?section=News
CVE ID: CVE-2009-4375 State: PUBLISHED Published: 2009-12-21T16:00:00Z Last Updated: 2024-09-16T16:47:39.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary SQL commands via the id_document parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.cybsec.com/vuln/OSSIM_2_1_5_SQLi.pdf - http://secunia.com/advisories/37727 - http://www.alienvault.com/community.php?section=News - http://www.osvdb.org/61149
CVE ID: CVE-2009-4376 State: PUBLISHED Published: 2009-12-21T21:00:00 Last Updated: 2024-08-07T07:01:20.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the daintree_sna_read function in the Daintree SNA file parser in Wireshark 1.2.0 through 1.2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4022 - http://secunia.com/advisories/37916 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16435 - https://bugs.wireshark.org/bugzilla/sho
isecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16435 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4294 - http://secunia.com/advisories/37842 - http://www.vupen.com/english/advisories/2009/3596 - http://osvdb.org/61177 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01248.html - http://www.securityfocus.com/bid/37407 - http://www.securitytracker.com/id?1023374 - http://www.wireshark.org/security/wnpa-sec-2009-09.html
CVE ID: CVE-2009-4377 State: PUBLISHED Published: 2009-12-21T21:00:00 Last Updated: 2024-08-07T07:01:20.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) SMB and (2) SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service (crash) via a crafted packet that triggers a NULL pointer dereference, as demonstrated by fuzz-2009-12-07-11141.pcap. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/61178 - http://www.debian.org/security/2009/dsa-1983 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9564 - http://secunia.com/advisories/37916 - http://secunia.com/advis
ry/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9564 - http://secunia.com/advisories/37916 - http://secunia.com/advisories/37842 - http://www.vupen.com/english/advisories/2009/3596 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01248.html - http://www.securityfocus.com/bid/37407 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4301 - http://www.securitytracker.com/id?1023374 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:031 - http://www.wireshark.org/security/wnpa-sec-2009-09.html