Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
advisories/35937 - http://secunia.com/advisories/35593 - http://www.ruby-lang.org/en/news/2009/06/09/dos-vulnerability-in-bigdecimal/ - http://redmine.ruby-lang.org/issues/show/794 - https://bugs.launchpad.net/bugs/cve/2009-1904 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=532689 - http://www.redhat.com/support/errata/RHSA-2009-1140.html - http://mail-index.netbsd.org/pkgsrc-changes/2009/06/10/msg024708.html - http://groups.google.com/group/rubyonrails-security/msg/fad60751e2b9b4f6?dmode=source - http://www.securitytracker.com/id?1022371 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9780 - http://lists.apple.com/archives/security-announce/2010
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9780 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://secunia.com/advisories/35399 - http://github.com/NZKoz/bigdecimal-segfault-fix/tree/master - http://weblog.rubyonrails.org/2009/6/10/dos-vulnerability-in-ruby/ - http://www.ubuntu.com/usn/USN-805-1 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00731.html - http://osvdb.org/55031 - http://www.securityfocus.com/bid/35278 - http://bugs.gentoo.org/show_bug.cgi?id=273213 - http://secunia.com/advisories/37705 - http://support.apple.com/kb/HT4077 - http://secunia.com/advisories/35699 - https://bugs.launchpad.net/bugs/385436
7705 - http://support.apple.com/kb/HT4077 - http://secunia.com/advisories/35699 - https://bugs.launchpad.net/bugs/385436 - http://security.gentoo.org/glsa/glsa-200906-02.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2009:160 - http://www.ruby-forum.com/topic/189071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51032 - http://secunia.com/advisories/35527 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.430805
CVE ID: CVE-2009-1905 State: PUBLISHED Published: 2009-06-03T20:35:00 Last Updated: 2024-08-07T05:27:54.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Common Code Infrastructure component in IBM DB2 8 before FP17, 9.1 before FP7, and 9.5 before FP4, when LDAP security (aka IBMLDAPauthserver) and anonymous bind are enabled, allows remote attackers to bypass password authentication and establish a database connection via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT - https://exchange.xforce.ibmcloud.com/vulnerabilities/50909 - http://www-01.ibm
nglish-us/aparlist/db2_v82/APARLIST.TXT - https://exchange.xforce.ibmcloud.com/vulnerabilities/50909 - http://www-01.ibm.com/support/docview.wss?uid=swg21318189 - http://www.securityfocus.com/bid/36540 - http://www.securityfocus.com/bid/35171 - http://securitytracker.com/id?1022319 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR32268 - http://www-01.ibm.com/support/docview.wss?uid=swg21293566 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR32272 - http://secunia.com/advisories/31787 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR32273 - http://secunia.com/advisories/35235 - http://www-01.ibm.com/support/docview.wss?uid=swg21386689
CVE ID: CVE-2009-1906 State: PUBLISHED Published: 2009-06-03T20:35:00Z Last Updated: 2024-09-16T16:53:25.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DRDA Services component in IBM DB2 9.1 before FP7 and 9.5 before FP4 allows remote attackers to cause a denial of service (memory corruption and application crash) via an IPv6 address in the correlation token in the APPID string, as demonstrated by an APPID string sent by the third-party DataDirect JDBC driver 3.7.32. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35171 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ36683 - http://www-01.ibm.com/support/docview.wss
us.com/bid/35171 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ36683 - http://www-01.ibm.com/support/docview.wss?uid=swg21293566 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ38874 - http://secunia.com/advisories/35235
CVE ID: CVE-2009-1907 State: PUBLISHED Published: 2009-06-04T16:00:00 Last Updated: 2024-08-07T05:27:54.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in claroline/linker/notfound.php in Claroline 1.8.11 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50404 - http://www.securityfocus.com/archive/1/503365/100/0/threaded - http://www.securitytracker.com/id?1022198 - http://gsasec.blogspot.com/2009/05/claroline-v1811-cross-site-scripting.htm
http://www.securitytracker.com/id?1022198 - http://gsasec.blogspot.com/2009/05/claroline-v1811-cross-site-scripting.html - http://forum.claroline.net/viewtopic.php?f=69&t=16193&p=42102#p42099 - http://www.securityfocus.com/bid/34883
CVE ID: CVE-2009-1908 State: PUBLISHED Published: 2009-06-04T16:00:00Z Last Updated: 2024-09-16T17:38:20.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34898 - http://portal.openskip.org/top/releasenote-ver1-0-0 - http://dev.openskip.org/redmine/issues/show/677 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000025.html - http://jvn.jp/en/jp/JVN43233160/index.html - http://secunia.com/
/jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000025.html - http://jvn.jp/en/jp/JVN43233160/index.html - http://secunia.com/advisories/35041
CVE ID: CVE-2009-1909 State: PUBLISHED Published: 2009-06-04T16:00:00Z Last Updated: 2024-09-17T03:47:51.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34898 - http://portal.openskip.org/top/releasenote-ver1-0-0 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000026.html - http://dev.openskip.org/redmine/issues/show/677 - http://secunia.com/advisories/35041 - http://jvn.jp/en/jp/JVN03114223/index.html
CVE ID: CVE-2009-1910 State: PUBLISHED Published: 2009-06-04T16:00:00 Last Updated: 2024-08-07T05:27:54.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in RTWebalbum 1.0.462 allows remote attackers to execute arbitrary SQL commands via the AlbumId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://rtwebalbum.svn.sourceforge.net/viewvc/rtwebalbum/index.php?view=log - http://secunia.com/advisories/35022 - http://rtwebalbum.svn.sourceforge.net/viewvc/rtwebalbum/ - http://www.securityfocus.com/bid/34888 - http://www.securityfocus.com/archive/1/503374/100/0/threaded - https://exchange.xforce.ibmcloud.com/vuln
com/bid/34888 - http://www.securityfocus.com/archive/1/503374/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/50406 - https://www.exploit-db.com/exploits/8648
CVE ID: CVE-2009-1911 State: PUBLISHED Published: 2009-06-04T16:00:00 Last Updated: 2024-08-07T05:27:54.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery (TWG) 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35060 - http://www.securityfocus.com/archive/1/503396/100/0/threaded - http://secunia.com/advisories/35020 - https://exchange.xforce.ibmcl
.securityfocus.com/archive/1/503396/100/0/threaded - http://secunia.com/advisories/35020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50408 - http://www.tinywebgallery.com/forum/viewtopic.php?t=1653 - http://www.securityfocus.com/bid/34892 - https://www.exploit-db.com/exploits/8649
CVE ID: CVE-2009-1912 State: PUBLISHED Published: 2009-06-04T16:00:00 Last Updated: 2024-08-07T05:27:54.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to include and execute arbitrary local .php files via a .. (dot dot) in a language cookie. NOTE: this can be leveraged for SQL injection by including awards.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.webspell.org/index.php?site=news_comments&newsID=130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50395 - http://www.securityfocus.com/bid/34862 - http://www.webspell.org
://exchange.xforce.ibmcloud.com/vulnerabilities/50395 - http://www.securityfocus.com/bid/34862 - http://www.webspell.org/index.php?site=files&file=30 - http://osvdb.org/54295 - http://secunia.com/advisories/35016 - http://www.osvdb.org/54296 - http://www.webspell.org/ - https://www.exploit-db.com/exploits/8622
CVE ID: CVE-2009-1913 State: PUBLISHED Published: 2009-06-04T16:00:00 Last Updated: 2024-08-07T05:27:54.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in manager.php in LuxBum 0.5.5, when magic_quotes_gpc is disabled and dotclear authentication is used, allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50405 - http://www.securityfocus.com/bid/34889 - http://secunia.com/advisories/35032 - http://www.vupen.com/english/advisories/2009/1281
CVE ID: CVE-2009-1914 State: PUBLISHED Published: 2009-06-04T16:00:00 Last Updated: 2024-08-07T05:27:54.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pci_register_iommu_region function in arch/sparc/kernel/pci_common.c in the Linux kernel before 2.6.29 on the sparc64 platform allows local users to cause a denial of service (system crash) by reading the /proc/iomem file, related to uninitialized pointers and the request_resource function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51196 - http://secunia.com/advisories/35656 - http://www.debian.org/security/2009/dsa-1844 - http://osvdb.org/54908 -
s/51196 - http://secunia.com/advisories/35656 - http://www.debian.org/security/2009/dsa-1844 - http://osvdb.org/54908 - http://www.securityfocus.com/bid/35415 - http://secunia.com/advisories/36051 - http://www.ubuntu.com/usn/usn-793-1 - http://www.openwall.com/lists/oss-security/2009/06/03/3 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=192d7a4667c6d11d1a174ec4cad9a3c5d5f9043c
CVE ID: CVE-2009-1915 State: PUBLISHED Published: 2009-06-04T17:00:00 Last Updated: 2024-08-07T05:27:54.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial of service (persistent crash) and possibly execute arbitrary code via an Internet shortcut .URL file containing a long URL parameter, which triggers a crash when browsing a folder that contains this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50858 - http://osvdb.org/54893 - https://www.ex
cus.com/bid/35150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50858 - http://osvdb.org/54893 - https://www.exploit-db.com/exploits/8832 - http://www.securityfocus.com/archive/1/503935/100/0/threaded
CVE ID: CVE-2009-1916 State: PUBLISHED Published: 2009-06-04T17:00:00 Last Updated: 2024-08-07T05:27:54.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the ns parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34559 - https://www.exploit-db.com/exploits/8454 - http://secunia.com/advisories/34773
CVE ID: CVE-2009-1917 State: PUBLISHED Published: 2009-07-29T17:00:00 Last Updated: 2024-08-07T05:27:54.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle attempts to access deleted objects in memory, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka "Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://ww
ption, aka "Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022611 - http://www.vupen.com/english/advisories/2009/2033 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-034 - http://www.securityfocus.com/bid/35831 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=953693 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6072 - http://www.us-cert.gov/cas/techalerts/TA09-195A.html
CVE ID: CVE-2009-1918 State: PUBLISHED Published: 2009-07-29T17:00:00 Last Updated: 2024-08-07T05:27:54.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle table operations, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption by adding malformed elements to an empty DIV element, related to the getElementsByTagName method, aka "HTML Objects Memory Corrup
malformed elements to an empty DIV element, related to the getElementsByTagName method, aka "HTML Objects Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022611 - http://www.securityfocus.com/archive/1/505523/100/0/threaded - http://www.securityfocus.com/bid/35826 - http://www.vupen.com/english/advisories/2009/2033 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-034 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=953693 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5524 - http://www.us-cert.gov/cas/techalerts/TA09-195A.h
.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5524 - http://www.us-cert.gov/cas/techalerts/TA09-195A.html - http://www.zerodayinitiative.com/advisories/ZDI-09-047
CVE ID: CVE-2009-1919 State: PUBLISHED Published: 2009-07-29T17:00:00 Last Updated: 2024-08-07T05:27:54.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle attempts to access deleted objects in memory, which allows remote attackers to execute arbitrary code via an HTML document containing embedded style sheets that modify unspecified rule properties that cause the behavior element to be "improperly processed," aka "
style sheets that modify unspecified rule properties that cause the behavior element to be "improperly processed," aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022611 - http://www.vupen.com/english/advisories/2009/2033 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5660 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-034 - http://www.securityfocus.com/archive/1/505524/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-09-048 - http://www.us-cert.gov/cas/techalerts/TA09-195A.html
CVE ID: CVE-2009-1920 State: PUBLISHED Published: 2009-09-08T22:00:00 Last Updated: 2024-08-07T05:27:54.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JScript scripting engine 5.1, 5.6, 5.7, and 5.8 in JScript.dll in Microsoft Windows, as used in Internet Explorer, does not properly load decoded scripts into memory before execution, which allows remote attackers to execute arbitrary code via a crafted web site that triggers memory corruption, aka "JScript Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-045 - http://www.us-cert.gov/cas/techa
: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-045 - http://www.us-cert.gov/cas/techalerts/TA09-251A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6316
CVE ID: CVE-2009-1921 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-1922 State: PUBLISHED Published: 2009-08-12T17:00:00 Last Updated: 2024-08-07T05:27:54.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka "MSMQ Null Pointer Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/56901 - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - https://docs.microsoft.com/en-us/security-updates/securi
/56901 - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-040 - http://secunia.com/advisories/36214 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6109 - http://www.securityfocus.com/archive/1/505691/100/0/threaded - http://www.securitytracker.com/id?1022714 - http://en.securitylab.ru/lab/PT-2008-09
CVE ID: CVE-2009-1923 State: PUBLISHED Published: 2009-08-12T17:00:00 Last Updated: 2024-08-07T05:27:54.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka "WINS Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-039 - https://oval.c
erts/TA09-223A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-039 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6410
CVE ID: CVE-2009-1924 State: PUBLISHED Published: 2009-08-12T17:00:00 Last Updated: 2024-08-07T05:27:54.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 allows remote WINS replication partners to execute arbitrary code via crafted data structures in a packet, aka "WINS Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6354 - https://docs.microsoft.com/en-us/security-updates/securitybulletin
earch/definition/oval%3Aorg.mitre.oval%3Adef%3A6354 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-039
CVE ID: CVE-2009-1925 State: PUBLISHED Published: 2009-09-08T22:00:00 Last Updated: 2024-08-07T05:27:54.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly manage state information, which allows remote attackers to execute arbitrary code by sending packets to a listening service, and thereby triggering misinterpretation of an unspecified field as a function pointer, aka "TCP/IP Timestamps Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3A
- CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6374 - http://www.us-cert.gov/cas/techalerts/TA09-251A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048
CVE ID: CVE-2009-1926 State: PUBLISHED Published: 2009-09-08T22:00:00 Last Updated: 2024-10-17T18:29:15.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service (TCP outage) via a series of TCP sessions that have pending data and a (1) small or (2) zero receive window size, and remain in the FIN-WAIT-1 or FIN-WAIT-2 state indefinitely, aka "TCP/IP Orphaned Connections Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/de
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5965 - http://www.recurity-labs.com/content/pub/Microsoft_Windows_CVE-2009-1926 - http://www.securityfocus.com/bid/36269 - http://osvdb.org/57797 - http://www.us-cert.gov/cas/techalerts/TA09-251A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048 - http://www.securityfocus.com/archive/1/506331/100/0/threaded
CVE ID: CVE-2009-1927 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-1928 State: PUBLISHED Published: 2009-11-11T19:00:00 Last Updated: 2024-08-07T05:27:54.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2; Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and Server 2003 SP2; and Active Directory Lightweight Directory Service (AD LDS) on Windows Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via a malformed (1) LDAP or (2) LDAPS request, aka "LSASS Recursive Stack Overflow Vulnerability." Additional Analyst Notes: - CVE
rmed (1) LDAP or (2) LDAPS request, aka "LSASS Recursive Stack Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5890 - http://www.us-cert.gov/cas/techalerts/TA09-314A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-066