Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4262 State: PUBLISHED Published: 2009-12-10T16:00:00 Last Updated: 2024-08-07T06:54:10.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Harold Bakker's NewsScript (HB-NS) 1.3 allows remote attackers to obtain access to the admin control panel via a direct request to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetstormsecurity.org/0912-exploits/hbns-admin.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/54518
CVE ID: CVE-2009-4263 State: PUBLISHED Published: 2009-12-10T16:00:00 Last Updated: 2024-08-07T06:54:10.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in main_forum.php in PTCPay GeN3 forum 1.3 allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54561
CVE ID: CVE-2009-4264 State: PUBLISHED Published: 2009-12-10T16:00:00 Last Updated: 2024-08-07T06:54:10.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in components/core/connect.php in AROUNDMe 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the language_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10329 - http://secunia.com/advisories/37567
CVE ID: CVE-2009-4265 State: PUBLISHED Published: 2009-12-10T16:00:00Z Last Updated: 2024-09-17T02:41:32.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to execute arbitrary code via a long Computer value in an .ipj project file. Additional Analyst Notes: - CVE Program Container: References: - http://freetexthost.com/abydoz3jwu - http://secunia.com/advisories/37572 - http://pocoftheday.blogspot.com/2009/12/ideal-administration-2009-v97-local.html
CVE ID: CVE-2009-4266 State: PUBLISHED Published: 2009-12-10T16:00:00 Last Updated: 2024-08-07T06:54:10.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in YABSoft Advanced Image Hosting (AIH) Script 2.2, and possibly 2.3, allows remote attackers to inject arbitrary web script or HTML via the text parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10336 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54582 - http://secunia.com/advisories/34366
CVE ID: CVE-2009-4267 State: PUBLISHED Published: 2018-02-19T16:00:00Z Last Updated: 2024-09-16T18:03:36.202Z Vendors: Apache Software Foundation Products: jUDDI Problem Types: Information Disclosure Description: The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to spoof log entries via the numRows parameter. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.apache.org/mod_mbox/juddi-user/201802.mbox/raw/%3C0F272EE1-E2B4-4016-8C5D-F76ABDD12D18%40gmail.com%3E - http://juddi.apache.org/security.html
CVE ID: CVE-2009-4268 State: REJECTED Published: 2017-05-26T21:00:00 Last Updated: 2017-05-26T20:57:01 Description: No description available.
CVE ID: CVE-2009-4269 State: PUBLISHED Published: 2010-08-16T19:00:00 Last Updated: 2024-08-07T06:54:10.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password hash generation algorithm in the BUILTIN authentication functionality for Apache Derby before 10.6.1.0 performs a transformation that reduces the size of the set of inputs to SHA-1, which produces a small search space that makes it easier for local and possibly remote attackers to crack passwords by generating hash collisions, related to password substitution. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=apache-db-general&m=127428514905504&w=1 - http://secunia.com/advisories
ram Container: References: - http://marc.info/?l=apache-db-general&m=127428514905504&w=1 - http://secunia.com/advisories/42948 - https://issues.apache.org/jira/browse/DERBY-4483 - http://blogs.sun.com/kah/entry/derby_10_6_1_has - http://www.vupen.com/english/advisories/2011/0149 - http://secunia.com/advisories/42970 - http://marcellmajor.com/derbyhash.html - http://www.securitytracker.com/id?1024977 - http://db.apache.org/derby/releases/release-10.6.1.0.cgi#Fix+for+Security+Bug+CVE-2009-4269 - http://www.securityfocus.com/bid/42637 - http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE ID: CVE-2009-4270 State: PUBLISHED Published: 2009-12-21T16:00:00 Last Updated: 2024-08-07T06:54:10.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file, as originally reported for debug logging code in gdevcups.c in the CUPS output driver. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201412-17.xml - http://www.openwall.com/lists/oss-security/2009/12/18/2 - http://www.mandriva.com/security/advisories?
a-201412-17.xml - http://www.openwall.com/lists/oss-security/2009/12/18/2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:134 - http://www.openwall.com/lists/oss-security/2009/12/18/1 - http://www.ubuntu.com/usn/USN-961-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:135 - http://www.vupen.com/english/advisories/2009/3597 - http://osvdb.org/61140 - http://secunia.com/advisories/40580 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - https://bugzilla.redhat.com/show_bug.cgi?id=540760 - http://secunia.com/advisories/37851 - http://www.securityfocus.com/bid/37410 - http://bugs.ghostscript.com/show_bug.cgi?id=690829
CVE ID: CVE-2009-4271 State: PUBLISHED Published: 2010-03-19T19:00:00 Last Updated: 2024-08-07T06:54:10.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel 2.6.9 through 2.6.17 on the x86_64 and amd64 platforms allows local users to cause a denial of service (panic) via a 32-bit application that calls mprotect on its Virtual Dynamic Shared Object (VDSO) page and then triggers a segmentation fault. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=548876 - https://rhn.redhat.com/errata/RHSA-2010-0146.html - http://www.openwall.com/lists/oss-security/2010/03/17/1 - https://oval.cisecurity.org/repository/sea
SA-2010-0146.html - http://www.openwall.com/lists/oss-security/2010/03/17/1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10248
CVE ID: CVE-2009-4272 State: PUBLISHED Published: 2010-01-27T17:00:00 Last Updated: 2024-08-07T06:54:10.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (deadlock) via crafted packets that force collisions in the IPv4 routing hash table, and trigger a routing "emergency" in which a hash chain is too long. NOTE: this is related to an issue in the Linux kernel before 2.6.31, when the kernel routing cache is disabled, involving an uninitialized pointer and a panic. Additional Analyst Notes: - CVE Program Container: Refer
he is disabled, involving an uninitialized pointer and a panic. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=545411 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31 - http://support.avaya.com/css/P8/documents/100073666 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55808 - http://www.openwall.com/lists/oss-security/2010/01/20/1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b6280b47a7a42970d098a3059f4ebe7e55e90d8d - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11167 - https://rhn.redhat.com/errata/RHSA-2010-0095.html - https://oval
search/definition/oval%3Aorg.mitre.oval%3Adef%3A11167 - https://rhn.redhat.com/errata/RHSA-2010-0095.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7026 - https://rhn.redhat.com/errata/RHSA-2010-0046.html - http://www.openwall.com/lists/oss-security/2010/01/20/6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=73e42897e8e5619eacb787d2ce69be12f47cfc21
CVE ID: CVE-2009-4273 State: PUBLISHED Published: 2010-01-26T18:00:00 Last Updated: 2024-08-07T06:54:10.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11417 - http://secunia.com/advisories/38154 - http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034036.html - htt
/secunia.com/advisories/38154 - http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034036.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034041.html - http://sourceware.org/systemtap/ftp/releases/systemtap-1.1.tar.gz - http://secunia.com/advisories/39656 - https://bugzilla.redhat.com/show_bug.cgi?id=550172 - http://secunia.com/advisories/38216 - http://lists.fedoraproject.org/pipermail/scm-commits/2010-February/394714.html - http://www.vupen.com/english/advisories/2010/0169 - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html - http://sourceware.org/ml/systemtap/2010-q1/msg00142.html - http://sourceware.org/bugzilla/s
unce/2010-04/msg00006.html - http://sourceware.org/ml/systemtap/2010-q1/msg00142.html - http://sourceware.org/bugzilla/show_bug.cgi?id=11105 - http://www.redhat.com/support/errata/RHSA-2010-0124.html - http://secunia.com/advisories/38765 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html - http://www.vupen.com/english/advisories/2010/1001
CVE ID: CVE-2009-4274 State: PUBLISHED Published: 2010-02-12T21:00:00 Last Updated: 2024-08-07T06:54:10.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index value. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-1811.html - http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/converter/ppm/xpmtoppm.c?view=patch&r1=995&r2=1076
11-1811.html - http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/converter/ppm/xpmtoppm.c?view=patch&r1=995&r2=1076&pathrev=1076 - http://www.vupen.com/english/advisories/2010/0358 - http://secunia.com/advisories/38530 - http://www.openwall.com/lists/oss-security/2010/02/09/11 - http://www.vupen.com/english/advisories/2010/0780 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56207 - https://bugzilla.redhat.com/show_bug.cgi?id=546580 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html - http://www.debian.org/security/2010/dsa-2026 - http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/doc/HISTORY?view=markup - http://secunia.com/advisories/38915 - http:/
//netpbm.svn.sourceforge.net/viewvc/netpbm/stable/doc/HISTORY?view=markup - http://secunia.com/advisories/38915 - http://www.securityfocus.com/bid/38164 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:039
CVE ID: CVE-2009-4275 State: REJECTED Published: 2017-05-26T21:00:00 Last Updated: 2017-05-26T20:57:01 Description: No description available.
CVE ID: CVE-2009-4276 State: REJECTED Published: 2017-05-26T21:00:00 Last Updated: 2017-05-26T20:57:01 Description: No description available.
CVE ID: CVE-2009-4277 State: REJECTED Published: 2021-06-11T21:13:11 Last Updated: 2021-06-11T21:13:11 Description: No description available.
CVE ID: CVE-2009-4278 State: REJECTED Published: 2021-06-11T21:13:17 Last Updated: 2021-06-11T21:13:17 Description: No description available.
CVE ID: CVE-2009-4279 State: REJECTED Published: 2021-06-11T21:13:23 Last Updated: 2021-06-11T21:13:23 Description: No description available.
CVE ID: CVE-2009-4280 State: REJECTED Published: 2021-06-11T21:13:29 Last Updated: 2021-06-11T21:13:29 Description: No description available.
CVE ID: CVE-2009-4281 State: REJECTED Published: 2021-06-11T21:13:34 Last Updated: 2021-06-11T21:13:34 Description: No description available.
CVE ID: CVE-2009-4282 State: REJECTED Published: 2021-06-11T21:13:40 Last Updated: 2021-06-11T21:13:40 Description: No description available.
CVE ID: CVE-2009-4283 State: REJECTED Published: 2021-06-11T21:13:53 Last Updated: 2021-06-11T21:13:53 Description: No description available.
CVE ID: CVE-2009-4284 State: REJECTED Published: 2021-06-11T21:13:59 Last Updated: 2021-06-11T21:13:59 Description: No description available.
CVE ID: CVE-2009-4285 State: REJECTED Published: 2021-06-11T21:14:05 Last Updated: 2021-06-11T21:14:05 Description: No description available.
CVE ID: CVE-2009-4286 State: REJECTED Published: 2021-06-11T21:14:10 Last Updated: 2021-06-11T21:14:10 Description: No description available.
CVE ID: CVE-2009-4287 State: REJECTED Published: 2021-06-11T21:14:16 Last Updated: 2021-06-11T21:14:16 Description: No description available.
CVE ID: CVE-2009-4288 State: REJECTED Published: 2021-06-11T21:14:24 Last Updated: 2021-06-11T21:14:24 Description: No description available.
CVE ID: CVE-2009-4289 State: REJECTED Published: 2021-06-11T21:14:33 Last Updated: 2021-06-11T21:14:33 Description: No description available.
CVE ID: CVE-2009-4290 State: REJECTED Published: 2021-06-11T21:14:39 Last Updated: 2021-06-11T21:14:39 Description: No description available.
CVE ID: CVE-2009-4291 State: REJECTED Published: 2021-06-11T21:14:44 Last Updated: 2021-06-11T21:14:44 Description: No description available.
CVE ID: CVE-2009-4292 State: PUBLISHED Published: 2009-12-10T23:00:00 Last Updated: 2024-08-07T06:54:10.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the URL filtering function in Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.40 through 2.51 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54051 - http://jvn.jp/en/jp/JVN06362164/index.html - http://www.vupen.com/english/advisories/2009/3111 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000069.html - http://www.seil.jp/seilseries/security/2
ories/2009/3111 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000069.html - http://www.seil.jp/seilseries/security/2009/a00669.php - http://osvdb.org/59362 - http://secunia.com/advisories/37154
CVE ID: CVE-2009-4293 State: PUBLISHED Published: 2009-12-10T23:00:00 Last Updated: 2024-08-07T06:54:10.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.30 through 2.51, when NAT is enabled, allows remote attackers to cause a denial of service (system restart) via crafted GRE packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3111 - http://www.seil.jp/seilseries/security/2009/a00674.php - http://osvdb.org/59361 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000070.html - http://jvn.jp/en/jp/JVN13011682/index.html - https://exchange.xforce.ib
jvn.jp/en/contents/2009/JVNDB-2009-000070.html - http://jvn.jp/en/jp/JVN13011682/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54050 - http://secunia.com/advisories/37154
CVE ID: CVE-2009-4294 State: PUBLISHED Published: 2009-12-11T16:00:00Z Last Updated: 2024-09-16T23:06:51.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Authentication Manager (aka utauthd) in Sun Ray Server Software 4.0 and 4.1 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3477 - http://www.securityfocus.com/bid/37284 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-07-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-267548-1
CVE ID: CVE-2009-4295 State: PUBLISHED Published: 2009-12-11T16:00:00Z Last Updated: 2024-09-17T01:52:00.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37285 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270549-1 - http://www.vupen.com/english/advisories/2009/3477 - http://sunso
lve.sun.com/search/document.do?assetkey=1-66-270549-1 - http://www.vupen.com/english/advisories/2009/3477 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-07-1
CVE ID: CVE-2009-4296 State: PUBLISHED Published: 2009-12-11T19:00:00Z Last Updated: 2024-09-17T03:38:32.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Taxonomy Timer module 5.x-1.8 and earlier and 6.x-alpha1 and earlier for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3388 - http://drupal.org/node/649396 - http://secunia.com/advisories/37573 - http://drupal.org/node/641050 - http://www.securityfocus.com/bid/37189 - http://drupal.org/node/641064
CVE ID: CVE-2009-4297 State: PUBLISHED Published: 2009-12-16T01:00:00Z Last Updated: 2024-09-17T03:33:10.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://docs.moodle.org/en/Moodle_1.9.7_release_notes - http://docs.moodle.org/en/Moodle_1.8.11_release_notes - http://www.vupen.com/english/advisories/2009/3455 - http://secunia.com/advisories/37614 - https://www.redhat.com/archives/fedora-package-announce/2009-
visories/2009/3455 - http://secunia.com/advisories/37614 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html - http://moodle.org/mod/forum/discuss.php?d=139100 - http://www.securityfocus.com/bid/37244
CVE ID: CVE-2009-4298 State: PUBLISHED Published: 2009-12-16T01:00:00Z Last Updated: 2024-09-17T03:02:42.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LAMS module (mod/lams) for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores the (1) username, (2) firstname, and (3) lastname fields within the user table, which allows attackers to obtain user account information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://docs.moodle.org/en/Moodle_1.9.7_release_notes - http://docs.moodle.org/en/Moodle_1.8.11_release_notes - http://www.vupen.com/english/advisories/2009/3455 - http://secunia.com/advisories/37614 - https://www.redhat.com
notes - http://www.vupen.com/english/advisories/2009/3455 - http://secunia.com/advisories/37614 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html - http://moodle.org/mod/forum/discuss.php?d=139102 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html - http://www.securityfocus.com/bid/37244
CVE ID: CVE-2009-4299 State: PUBLISHED Published: 2009-12-16T01:00:00Z Last Updated: 2024-09-16T16:18:45.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://docs.moodle.org/en/Moodle_1.9.7_release_notes - http://docs.moodle.org/en/Moodle_1.8.11_release_notes - http://www.vupen.com/english/advisories/2009/3455 - http://secunia.com/advisories/37614 - https://www.redhat.com/archives/fedora-pa
vupen.com/english/advisories/2009/3455 - http://secunia.com/advisories/37614 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html - http://moodle.org/mod/forum/discuss.php?d=139103 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html - http://www.securityfocus.com/bid/37244
CVE ID: CVE-2009-4300 State: PUBLISHED Published: 2009-12-16T01:00:00Z Last Updated: 2024-09-17T03:13:36.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 store the MD5 hashes for passwords in the user table, even when the cached hashes are not used by the plugin, which might make it easier for attackers to obtain credentials via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://docs.moodle.org/en/Moodle_1.9.7_release_notes - http://docs.moodle.org/en/Moodle_1.8.11_release_notes - http://moodle.org/mod/forum/discuss.php?d=139105 - http://www.vu
http://docs.moodle.org/en/Moodle_1.8.11_release_notes - http://moodle.org/mod/forum/discuss.php?d=139105 - http://www.vupen.com/english/advisories/2009/3455 - http://secunia.com/advisories/37614 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html - http://www.securityfocus.com/bid/37244
CVE ID: CVE-2009-4301 State: PUBLISHED Published: 2009-12-16T01:00:00Z Last Updated: 2024-09-17T01:46:39.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: mnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled, does not properly check permissions, which allows remote authenticated servers to execute arbitrary MNET functions. Additional Analyst Notes: - CVE Program Container: References: - http://docs.moodle.org/en/Moodle_1.9.7_release_notes - http://cvs.moodle.org/moodle/mnet/lib.php?r1=1.16.2.10&r2=1.16.2.11 - http://docs.moodle.org/en/Moodle_1.8.11_release_notes - http://moodle.org/mod/forum/discuss.php?d=139106 - http://cvs.moodle.org/m