Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2693 State: PUBLISHED Published: 2010-01-28T20:00:00 Last Updated: 2024-08-07T05:59:56.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02241113 - http://marc.info/?l=bugtraq&m=127420533226623&w=2 - http://svn.apache.org/viewvc?rev=892815&view=rev - http://secunia.com/advis
marc.info/?l=bugtraq&m=127420533226623&w=2 - http://svn.apache.org/viewvc?rev=892815&view=rev - http://secunia.com/advisories/39317 - http://www.debian.org/security/2011/dsa-2207 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://secunia.com/advisories/40330 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:177 - http://securitytracker.com/id?1023505 - http://secunia.com/advisories/43310 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55855 - http://marc.info/?l=bugtraq&m=127420533226623&w=2 - http://www.vupen.com/english/advisories/2010/1559 - http://lists.apple.com/archives/security-announce/201
33226623&w=2 - http://www.vupen.com/english/advisories/2010/1559 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://marc.info/?l=bugtraq&m=133469267822771&w=2 - http://www.securityfocus.com/bid/37944 - http://www.vupen.com/english/advisories/2010/1986 - http://www.redhat.com/support/errata/RHSA-2010-0580.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7017 - http://secunia.com/advisories/40813 - http://secunia.com/advisories/38541 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:176 - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/57126 - http://www.vmware.com/support/vspher
- http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/57126 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html - http://www.securityfocus.com/archive/1/509148/100/0/threaded - http://ubuntu.com/usn/usn-899-1 - http://support.apple.com/kb/HT4077 - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html - http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html - http://secunia.com/advisories/38687 - http://secunia.com/advisories/38346 - http://marc.info/?l=bugtraq&m=133469267822771&w=2 - http://tomcat.apache.org/security-5.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://www.redhat.com/support/e
he.org/security-5.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://www.redhat.com/support/errata/RHSA-2010-0119.html - http://www.redhat.com/support/errata/RHSA-2010-0582.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19355 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://secunia.com/advisories/38316 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://www.vupen.com/english/advisories/2010/0213 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02241113 - http://svn.apache.org/viewvc?rev=902650&view=rev - http://
.com/bizsupport/TechSupport/Document.jsp?objectID=c02241113 - http://svn.apache.org/viewvc?rev=902650&view=rev - http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2009-2694 State: PUBLISHED Published: 2009-08-20T22:00:00 Last Updated: 2024-08-07T05:59:56.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376. Additional Analyst Notes: - CVE Program Container: Re
reportedly exists because of an incomplete fix for CVE-2009-1376. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=514957 - http://www.vupen.com/english/advisories/2009/2303 - http://secunia.com/advisories/36392 - http://www.pidgin.im/news/security/?id=34 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6320 - http://www.coresecurity.com/content/libpurple-arbitrary-write - http://secunia.com/advisories/36402 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-266908-1 - http://developer.pidgin.im/viewmtn/revision/info/6f7343166c673bf0496ecb1afec9b633c1d54a0e - http://secunia.com/adviso
- http://developer.pidgin.im/viewmtn/revision/info/6f7343166c673bf0496ecb1afec9b633c1d54a0e - http://secunia.com/advisories/36384 - http://www.debian.org/security/2009/dsa-1870 - http://secunia.com/advisories/37071 - http://secunia.com/advisories/36708 - http://www.vupen.com/english/advisories/2009/2663 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10319 - http://secunia.com/advisories/36401 - http://www.exploit-db.com/exploits/9615 - http://developer.pidgin.im/wiki/ChangeLog - https://rhn.redhat.com/errata/RHSA-2009-1218.html
CVE ID: CVE-2009-2695 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T05:59:57.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory addresses, which allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities, related to (1) the default configuration of the allow_unconfined_mmap_low boolean in SELinux on Red Hat Enterprise Linux (RHEL) 5, (2) an error that causes allow_unconfined_mmap_low to be ignored in the unconfined_t domain, (3) lack of a requirement for the CAP_SYS_RAWIO capability for these mmap ope
to be ignored in the unconfined_t domain, (3) lack of a requirement for the CAP_SYS_RAWIO capability for these mmap operations, and (4) interaction between the mmap_min_addr protection mechanism and certain application programs. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc7 - http://www.redhat.com/support/errata/RHSA-2009-1672.html - http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=84336d1a77ccd2c06a730ddd38e695c2324a7386 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1d9959734a1949ea4f2427bd2d8b21ede6b2441c - http://www.secu
org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1d9959734a1949ea4f2427bd2d8b21ede6b2441c - http://www.securityfocus.com/bid/36051 - https://rhn.redhat.com/errata/RHSA-2009-1540.html - https://bugzilla.redhat.com/show_bug.cgi?id=517830 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ab5a91a8364c3d6fc617abc47cc81d162c01d90a - http://www.ubuntu.com/usn/USN-852-1 - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - http://patchwork.kernel.org/patch/36540/ - http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=47d439e9fb8a81a90022cfa785bf1c36c4e2aff6 - htt
l.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=47d439e9fb8a81a90022cfa785bf1c36c4e2aff6 - http://patchwork.kernel.org/patch/36539/ - http://kbase.redhat.com/faq/docs/DOC-18042 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=788084aba2ab7348257597496befcbccabdc98a3 - http://eparis.livejournal.com/606.html - http://twitter.com/spendergrsec/statuses/3303390960 - https://bugzilla.redhat.com/show_bug.cgi?id=511143 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html - http://patchwork.kernel.org/patch/36649/ - https://rhn.redhat.com/errata/RHSA-2009-1548.html - http://thread.gmane.org/gmane.linux.kernel.ls
nel.org/patch/36649/ - https://rhn.redhat.com/errata/RHSA-2009-1548.html - http://thread.gmane.org/gmane.linux.kernel.lsm/9075 - http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=a2551df7ec568d87793d2eea4ca744e86318f205 - http://secunia.com/advisories/38834 - http://danwalsh.livejournal.com/30084.html - http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=7c73875e7dda627040b12c19b01db634fa7f0fd1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9882 - http://patchwork.kernel.org/patch/36650/ - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9c0d9
atchwork.kernel.org/patch/36650/ - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9c0d90103c7e0eb6e638e5b649e9f6d8d9c1b4b3 - http://www.openwall.com/lists/oss-security/2009/08/17/4 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7144 - http://secunia.com/advisories/36501 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8cf948e744e0218af604c32edecde10006dc8e9e - http://www.debian.org/security/2010/dsa-2005 - http://secunia.com/advisories/37105 - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2009-2696 State: PUBLISHED Published: 2010-08-05T18:00:00 Last Updated: 2024-08-07T05:59:57.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML." NOTE: this is due to a missing fix for CVE-2009-0781. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=616717 - http://www.vupen.com/english/advis
Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=616717 - http://www.vupen.com/english/advisories/2010/1986 - http://www.redhat.com/support/errata/RHSA-2010-0580.html - http://secunia.com/advisories/40813
CVE ID: CVE-2009-2697 State: PUBLISHED Published: 2009-09-04T20:00:00 Last Updated: 2024-08-07T05:59:56.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via XDMCP connections, a different vulnerability than CVE-2007-5079. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9586 - http://secunia.com/advisories/36553 - https://bugzilla.redhat.com/show_bug.cgi?id=239818
3Aorg.mitre.oval%3Adef%3A9586 - http://secunia.com/advisories/36553 - https://bugzilla.redhat.com/show_bug.cgi?id=239818 - http://www.securityfocus.com/bid/36219 - https://rhn.redhat.com/errata/RHSA-2009-1364.html
CVE ID: CVE-2009-2698 State: PUBLISHED Published: 2009-08-27T17:00:00 Last Updated: 2024-08-07T05:59:56.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2009-1233.html - http://rhn.redhat.com/errata/RHSA-2009-1223.html - http://www.securityfocus.com/archive/1/512019/100/0/thread
233.html - http://rhn.redhat.com/errata/RHSA-2009-1223.html - http://www.securityfocus.com/archive/1/512019/100/0/threaded - http://secunia.com/advisories/37298 - http://www.securitytracker.com/id?1022761 - http://secunia.com/advisories/36430 - http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00008.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11514 - http://secunia.com/advisories/36510 - http://secunia.com/advisories/37471 - http://rhn.redhat.com/errata/RHSA-2009-1222.html - http://www.ubuntu.com/usn/USN-852-1 - http://secunia.com/advisories/23073 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.secur
- http://secunia.com/advisories/23073 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.securityfocus.com/bid/36108 - http://www.openwall.com/lists/oss-security/2009/08/25/1 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://support.avaya.com/css/P8/documents/100067254 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9142 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8557 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1e0c14f49d6b393179f423abbac47f85618d3d46 - htt
/git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1e0c14f49d6b393179f423abbac47f85618d3d46 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19 - http://www.vupen.com/english/advisories/2009/3316 - http://secunia.com/advisories/37105 - https://bugzilla.redhat.com/show_bug.cgi?id=518034
CVE ID: CVE-2009-2699 State: PUBLISHED Published: 2009-10-13T10:00:00 Last Updated: 2024-08-07T05:59:56.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other products, does not properly handle errors, which allows remote attackers to cause a denial of service (daemon hang) via unspecified HTTP requests, related to the prefork and event MPMs. Additional Analyst Notes: - CVE Program Container: References: - http://www.apache.org/dist/httpd/CHANGES_2.2.14 - http://securitytracker.com/id?1022988 -
gram Container: References: - http://www.apache.org/dist/httpd/CHANGES_2.2.14 - http://securitytracker.com/id?1022988 - http://marc.info/?l=bugtraq&m=133355494609819&w=2 - http://www.securityfocus.com/bid/36596 - http://marc.info/?l=bugtraq&m=133355494609819&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53666 - https://issues.apache.org/bugzilla/show_bug.cgi?id=47645 - http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9
99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E -
://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d039
577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2009-2700 State: PUBLISHED Published: 2009-09-02T17:00:00 Last Updated: 2024-08-07T05:59:56.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36702 - http://www.securityfocus.com/bid/36203 - http://qt.gitorious.org/
r: References: - http://secunia.com/advisories/36702 - http://www.securityfocus.com/bid/36203 - http://qt.gitorious.org/qt/qt/commit/802d8c02eaa0aa9cd8d0c6cbd18cd814e6337bc6 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:225 - http://www.ubuntu.com/usn/usn-829-1 - http://www.vupen.com/english/advisories/2009/2499 - http://secunia.com/advisories/36536
CVE ID: CVE-2009-2701 State: PUBLISHED Published: 2009-09-08T18:00:00Z Last Updated: 2024-09-16T20:36:27.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://mail.zope.org/pipermail/zope-announce/2009-September/002221.html - http://pypi.python.org/pypi/ZODB3/3.8.3 - http://www.vupen.com/english/a
mail/zope-announce/2009-September/002221.html - http://pypi.python.org/pypi/ZODB3/3.8.3 - http://www.vupen.com/english/advisories/2009/2534 - http://pypi.python.org/pypi/ZODB3/3.9.0c2
CVE ID: CVE-2009-2702 State: PUBLISHED Published: 2009-09-08T18:00:00 Last Updated: 2024-08-07T05:59:56.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=520661 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:330 - http
ps://bugzilla.redhat.com/show_bug.cgi?id=520661 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:330 - http://secunia.com/advisories/36468 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:162 - http://www.vupen.com/english/advisories/2009/2532
CVE ID: CVE-2009-2703 State: PUBLISHED Published: 2009-09-08T18:00:00 Last Updated: 2024-08-07T05:59:56.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36601 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6435 - http://developer.pidgin.im/viewmtn/revision/info/ad2c6ee53ec9122b25aeb1f918db53be69bdeac3
org.mitre.oval%3Adef%3A6435 - http://developer.pidgin.im/viewmtn/revision/info/ad2c6ee53ec9122b25aeb1f918db53be69bdeac3 - http://www.pidgin.im/news/security/index.php?id=40 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11379 - http://www.securityfocus.com/bid/36277
CVE ID: CVE-2009-2704 State: PUBLISHED Published: 2009-08-11T10:00:00Z Last Updated: 2024-09-16T18:49:26.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing a %00 (encoded null byte). Additional Analyst Notes: - CVE Program Container: References: - http://i8jesus.com/?p=55
CVE ID: CVE-2009-2705 State: PUBLISHED Published: 2009-08-11T10:00:00Z Last Updated: 2024-09-16T21:04:16.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters. Additional Analyst Notes: - CVE Program Container: References: - http://i8jesus.com/?p=55
CVE ID: CVE-2009-2706 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-2707 State: PUBLISHED Published: 2009-09-18T10:00:00Z Last Updated: 2024-09-16T22:16:00.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ia32el (aka the IA 32 emulation functionality) before 7042_7022-0.4.2 in SUSE Linux Enterprise (SLE) 10 SP2 on Itanium IA64 machines allows local users to cause a denial of service (system crash) via a 32-bit x86 application. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html - http://www.securityfocus.com/bid/36393 - http://support.novell.com/security/cve/CVE-2009-2707.html - https://bugs.launchpad.net/bugs/c
urityfocus.com/bid/36393 - http://support.novell.com/security/cve/CVE-2009-2707.html - https://bugs.launchpad.net/bugs/cve/2009-2707 - https://bugzilla.novell.com/show_bug.cgi?id=521524
CVE ID: CVE-2009-2708 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-2709 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-2710 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.