Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3813 State: PUBLISHED Published: 2009-10-27T16:00:00Z Last Updated: 2024-09-17T00:51:30.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via the (1) forum parameter to modules/forum/post.php and possibly (2) forum_id variable to modules/forum/class/class.permissions.php. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/9sg_runcms_forum_sql.html - http://secunia.com/advisories/37137
CVE ID: CVE-2009-3814 State: PUBLISHED Published: 2009-10-27T16:00:00Z Last Updated: 2024-09-17T02:36:20.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in RunCMS 2M1 allows remote authenticated administrators to execute arbitrary PHP code via the "Filter/Banning" feature, as demonstrated by modifying modules/system/cache/bademails.php using the "Prohibited: Emails" action, and other unspecified filters. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/9sg_runcms_forum_sql.html
CVE ID: CVE-2009-3815 State: PUBLISHED Published: 2009-10-27T16:00:00Z Last Updated: 2024-09-16T17:39:16.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: RunCMS 2M1, when running with certain error_reporting levels, allows remote attackers to obtain sensitive information via (1) the op[] parameter to modules/contact/index.php or (2) uid[] parameter to userinfo.php, which leaks the installation path in an error message when these parameters are used in a call to the preg_match function. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/9sg_runcms_forum_sql.html
CVE ID: CVE-2009-3816 State: PUBLISHED Published: 2009-10-28T10:00:00Z Last Updated: 2024-09-17T02:36:23.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connections 2.5.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37106 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO43637 - http://www-01.ibm.com/support/docview.wss?uid=swg24024303
CVE ID: CVE-2009-3817 State: PUBLISHED Published: 2009-10-28T10:00:00Z Last Updated: 2024-09-16T23:40:41.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in doc/releasenote.php in the BookLibrary (com_booklibrary) component 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter, a different vector than CVE-2009-2637. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36732/exploit - http://www.vupen.com/english/ad
- CVE Program Container: References: - http://www.securityfocus.com/bid/36732/exploit - http://www.vupen.com/english/advisories/2009/2969 - http://www.securityfocus.com/bid/36732
CVE ID: CVE-2009-3818 State: PUBLISHED Published: 2009-10-28T10:00:00Z Last Updated: 2024-09-16T23:16:40.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the session handling feature in freeCap CAPTCHA (sr_freecap) extension 1.2.0 and earlier for TYPO3 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37094 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/
CVE ID: CVE-2009-3819 State: PUBLISHED Published: 2009-10-28T10:00:00Z Last Updated: 2024-09-17T02:20:58.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Random Images (maag_randomimage) extension 1.6.4 and earlier for TYPO3 allows remote attackers to execute arbitrary shell commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37095 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/
CVE ID: CVE-2009-3820 State: PUBLISHED Published: 2009-10-28T10:00:00Z Last Updated: 2024-09-16T22:36:39.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Flagbit Filebase (fb_filebase) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/
CVE ID: CVE-2009-3821 State: PUBLISHED Published: 2009-10-28T10:00:00Z Last Updated: 2024-09-16T18:34:06.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/
CVE ID: CVE-2009-3822 State: PUBLISHED Published: 2009-10-28T10:00:00Z Last Updated: 2024-09-17T03:18:23.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat (com_ajaxchat) component 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path] parameter to tests/ajcuser.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2968 - http://www.securityfocus.com/bid/36731 - http://www.packetstormsecurity.org/0910-exploits/joomlaajaxchat-rfi.txt - http://secunia.com/advisories/37087
CVE ID: CVE-2009-3823 State: PUBLISHED Published: 2009-10-28T10:00:00 Last Updated: 2024-08-07T06:38:30.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magic_quotes_gpc is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the GLOBALS[page] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51713 - http://www.exploit-db.com/exploits/9144
CVE ID: CVE-2009-3824 State: PUBLISHED Published: 2009-10-28T10:00:00 Last Updated: 2024-08-07T06:38:30.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in include/processor.php in Greenwood PHP Content Manager 0.3.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the content_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9156 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51737
CVE ID: CVE-2009-3825 State: PUBLISHED Published: 2009-10-28T10:00:00 Last Updated: 2024-08-07T06:38:30.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in GenCMS 2006 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) p parameter to show.php and the (2) Template parameter to admin/pages/SiteNew.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51653 - http://www.exploit-db.com/exploits/9103
CVE ID: CVE-2009-3826 State: PUBLISHED Published: 2009-10-28T14:00:00 Last Updated: 2024-08-07T06:38:30.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53922 - http://www.vupen.com/en
Patches/1.4/Readme.Patch-20091019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53922 - http://www.vupen.com/english/advisories/2009/3013 - http://securitytracker.com/id?1023079 - http://secunia.com/advisories/37107 - http://www.vupen.com/english/advisories/2010/1043 - http://www.osvdb.org/59164 - http://www.debian.org/security/2010/dsa-2040 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://www.securityfocus.com/bid/36800 - http://secunia.com/advisories/39679 - http://www.securityfocus.com/archive/1/507440/100/0/threaded
CVE ID: CVE-2009-3828 State: PUBLISHED Published: 2009-10-30T19:00:00 Last Updated: 2024-08-07T06:38:30.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface for Everfocus EDR1600 DVR allows remote attackers to bypass authentication and access live cams via certain vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507373/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/53909 - http://www.osvdb.org/59139 - http://secunia.com/advisories/37108 - http://seclists.org/fulldisclosure/2009/Oct/293
CVE ID: CVE-2009-3829 State: PUBLISHED Published: 2009-10-30T20:05:00 Last Updated: 2024-08-07T06:38:30.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted erf file, related to an "unsigned integer wrap vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5979 - http://secunia.com/advisories/37477 - http://anonsvn.wireshark.org/viewvc/trunk/wiretap/erf.c?view=markup&pathrev=29364 - http://secunia.
m/advisories/37477 - http://anonsvn.wireshark.org/viewvc/trunk/wiretap/erf.c?view=markup&pathrev=29364 - http://secunia.com/advisories/37409 - http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3849 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9945 - http://www.debian.org/security/2009/dsa-1942 - http://www.kb.cert.org/vuls/id/676492
CVE ID: CVE-2009-3830 State: PUBLISHED Published: 2009-10-30T20:05:00 Last Updated: 2024-08-07T06:38:30.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers to read ASP.NET source code via pathnames in the SourceUrl and Source parameters to _layouts/download.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507419/100/0/threaded - http://www.securityfocus.com/bid/36817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53955 - http://support.microsoft.com/kb/976829
CVE ID: CVE-2009-3831 State: PUBLISHED Published: 2009-10-30T20:05:00 Last Updated: 2024-08-07T06:38:30.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3073 - http://www.opera.com/support/kb/view/938/ - http://www.opera.com/docs/changelogs/unix/1001/ - http://secunia.com/advisories/37182 - http://www.securityfocus.com/bid/36850 - http://www.osvdb.org/59357 - https://exchange.xforce.ibmcloud.com/vulnerabi
2 - http://www.securityfocus.com/bid/36850 - http://www.osvdb.org/59357 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54020 - http://www.opera.com/docs/changelogs/mac/1001/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6574 - http://www.opera.com/docs/changelogs/windows/1001/
CVE ID: CVE-2009-3832 State: PUBLISHED Published: 2009-10-30T20:05:00 Last Updated: 2024-08-07T06:38:30.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/59359 - http://www.vupen.com/english/advisories/2009/3073 - http://www.opera.com/support/kb/view/940/ - http://secunia.com/advisories/37182 - http://www.securityfocus.com/bid/36850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54022 - https://ov
37182 - http://www.securityfocus.com/bid/36850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54022 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6384 - http://www.opera.com/docs/changelogs/windows/1001/
CVE ID: CVE-2009-3833 State: PUBLISHED Published: 2009-11-02T15:00:00Z Last Updated: 2024-09-16T23:10:34.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web script or HTML via the album parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37156 - http://packetstormsecurity.org/0910-exploits/tftgallery-xss.txt
CVE ID: CVE-2009-3834 State: PUBLISHED Published: 2009-11-02T15:00:00 Last Updated: 2024-08-07T06:38:30.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Photoblog (com_photoblog) component alpha 3 and alpha 3a for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in a blogs action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36809 - http://packetstormsecurity.org/0910-exploits/joomlaphotoblog-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/53943
CVE ID: CVE-2009-3835 State: PUBLISHED Published: 2009-11-02T15:00:00 Last Updated: 2024-08-07T06:38:30.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JShop (com_jshop) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a product action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetstormsecurity.org/0910-exploits/joomlajshop-sql.txt - http://www.securityfocus.com/bid/36808 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53944
CVE ID: CVE-2009-3836 State: PUBLISHED Published: 2009-11-02T15:00:00Z Last Updated: 2024-09-16T17:18:00.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: ArubaOS 3.3.1.x, 3.3.2.x, RN 3.1.x, 3.4.x, and 3.3.2.x-FIPS on the Aruba Mobility Controller allows remote attackers to cause a denial of service (Access Point crash) via a malformed 802.11 Association Request management frame. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/support/alerts/aid-102609.asc - http://www.vupen.com/english/advisories/2009/3051 - http://www.securityfocus.com/bid/36832 - http://secunia.com/advisories/37085
CVE ID: CVE-2009-3837 State: PUBLISHED Published: 2009-11-02T15:00:00 Last Updated: 2024-08-07T06:38:30.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507376/100/0/threaded - http://osvdb.org/59262 - http://www.vupen.com/english/advisories/2009/3025 - http://www.packetstormsecurity.org/0910-exploits/eurekamc-dos.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/53940 - http://www.securityfocus.com/archive/1/508126/100/0/threaded - http://
hange.xforce.ibmcloud.com/vulnerabilities/53940 - http://www.securityfocus.com/archive/1/508126/100/0/threaded - http://secunia.com/advisories/37132
CVE ID: CVE-2009-3838 State: PUBLISHED Published: 2009-11-02T15:00:00 Last Updated: 2024-08-07T06:38:30.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Pegasus Mail (PMail) 4.41 and possibly 4.51 allows remote POP3 servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36797 - http://osvdb.org/59261 - http://www.vupen.com/english/advisories/2009/3026 - http://secunia.com/advisories/37134 - http://www.securitytracker.com/id?1023075 - http://www.securityfocus.com/archive/1/507377/100/0/thr
m/advisories/37134 - http://www.securitytracker.com/id?1023075 - http://www.securityfocus.com/archive/1/507377/100/0/threaded - http://www.packetstormsecurity.org/0910-exploits/pegasusmc-dos.txt - http://www.vupen.com/exploits/Pegasus_Mail_POP3_Message_Handling_Remote_Buffer_Overflow_Exploit_3026233.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/53933
CVE ID: CVE-2009-3839 State: PUBLISHED Published: 2009-11-02T15:00:00 Last Updated: 2024-08-07T06:38:30.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv_37 through snv_125, might allow remote attackers to execute arbitrary code by leveraging access to the X server. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37184 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6480 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270969-1 - http://www.vupen.com/english/advis
al%3Adef%3A6480 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270969-1 - http://www.vupen.com/english/advisories/2009/3070 - http://www.securityfocus.com/bid/36840
CVE ID: CVE-2009-3840 State: PUBLISHED Published: 2009-11-19T00:00:00 Last Updated: 2024-08-07T06:38:30.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: The embedded database engine service (aka ovdbrun.exe) in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to cause a denial of service (daemon crash) via an invalid Error Code field in a packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37046 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01926980 - http://www.coresecurity.com/content/openview_nnm_internaldb_dos - http://osvdb.org/60200 - http://h20000.www2.hp.com
0 - http://www.coresecurity.com/content/openview_nnm_internaldb_dos - http://osvdb.org/60200 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01926980 - http://seclists.org/fulldisclosure/2009/Nov/199
CVE ID: CVE-2009-3841 State: PUBLISHED Published: 2009-11-17T18:00:00 Last Updated: 2024-08-07T06:38:30.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.5x, 7.5x, and 7.60 on Windows allows remote authenticated users to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023187 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01861595 - http://secunia.com/advisories/37388 - http://osvdb.org/60222 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01861595 - http:
7388 - http://osvdb.org/60222 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01861595 - http://www.securityfocus.com/bid/37037
CVE ID: CVE-2009-3842 State: PUBLISHED Published: 2009-11-20T17:00:00 Last Updated: 2024-08-07T06:38:30.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on the HP Color LaserJet M3530 Multifunction Printer with firmware 05.058.4 and the Color LaserJet CP3525 Printer with firmware 53.021.2 allows remote attackers to obtain "access to data" or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=125864723627975&w=2 - http://marc.info/?l=bugtraq&m=125864723627975&w=2 - http://secunia.com/advisories/37433 - http://www.vupen.com/english/advisories/2009/3293 - http://ww
25864723627975&w=2 - http://secunia.com/advisories/37433 - http://www.vupen.com/english/advisories/2009/3293 - http://www.securityfocus.com/bid/37070
CVE ID: CVE-2009-3843 State: PUBLISHED Published: 2009-11-24T00:00:00 Last Updated: 2024-08-07T06:38:30.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make requests to manager/html/upload. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=125873415424980&w=2 - http://www.zerodayinitiative.com/advisories/ZDI-09-085/ - https://exchange.xforce.ibmc
l=bugtraq&m=125873415424980&w=2 - http://www.zerodayinitiative.com/advisories/ZDI-09-085/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/54361 - http://securitytracker.com/id?1023222 - http://marc.info/?l=bugtraq&m=125873415424980&w=2 - http://secunia.com/advisories/37444 - http://www.osvdb.org/60317
CVE ID: CVE-2009-3844 State: PUBLISHED Published: 2009-12-08T23:00:00 Last Updated: 2024-08-07T06:38:30.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MSG_PROTOCOL packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54638 - http://marc.info/?l=bugtraq&m=126029001704529&w=2 - http://www.vupen.com/english/advisories/2009/3454 - http://www.securityfocus.com/archive/1/508329/100/0/threaded - h
2 - http://www.vupen.com/english/advisories/2009/3454 - http://www.securityfocus.com/archive/1/508329/100/0/threaded - http://marc.info/?l=bugtraq&m=126029001704529&w=2 - http://www.securityfocus.com/bid/37250 - http://secunia.com/advisories/37600 - http://zerodayinitiative.com/advisories/ZDI-09-091/ - http://securitytracker.com/id?1023288
CVE ID: CVE-2009-3845 State: PUBLISHED Published: 2009-12-10T22:00:00 Last Updated: 2024-08-07T06:38:30.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: The port-3443 HTTP server in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostname parameter to unspecified Perl scripts. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-09-094/ - http://www.securityfocus.com/archive/1/508345/100/0/threaded - http://www.securityfocus.com/bid/37261 - http://marc.info/?l=bugtraq&m=126046355120442&w=2 - http://h20000.www2.hp.com/bizsu
://www.securityfocus.com/bid/37261 - http://marc.info/?l=bugtraq&m=126046355120442&w=2 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54651 - http://www.securityfocus.com/bid/37300 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877