Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4133 State: PUBLISHED Published: 2009-12-23T18:00:00 Last Updated: 2024-08-07T06:54:09.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2009-1689.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54984 - http://secunia.com/advisories/37766 - http://www.redhat.com/suppo
//exchange.xforce.ibmcloud.com/vulnerabilities/54984 - http://secunia.com/advisories/37766 - http://www.redhat.com/support/errata/RHSA-2009-1688.html - http://securitytracker.com/id?1023378 - http://www.securityfocus.com/bid/37443 - http://condor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1018 - http://www.cs.wisc.edu/condor/security/vulnerabilities/CONDOR-2009-0001.html - https://bugzilla.redhat.com/show_bug.cgi?id=544371 - http://secunia.com/advisories/37803 - http://www.cs.wisc.edu/condor/manual/v7.4/8_3Stable_Release.html#SECTION00931000000000000000
CVE ID: CVE-2009-4134 State: PUBLISHED Published: 2010-05-27T19:00:00 Last Updated: 2024-08-07T06:54:09.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSIZE value in a black-and-white (aka B/W) RGB image that triggers an invalid pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4435 - http://www.vupen.com/english/advisories/2011/0212 - http://secunia.com/advisories/43364 - http://www.vupen.com/english/advisories/2011/0413 - http://lists.a
ies/2011/0212 - http://secunia.com/advisories/43364 - http://www.vupen.com/english/advisories/2011/0413 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://www.vupen.com/english/advisories/2011/0122 - https://bugzilla.redhat.com/show_bug.cgi?id=541698 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/42888 - http://www.securityfocus.com/bid/40361 - http://www.redhat.com/support/errata/RHSA-2011-0027.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:215 - http://bugs.python.org/issue8678 - http://www.redhat.com/support/errata/RHSA-2011-0260.html
CVE ID: CVE-2009-4135 State: PUBLISHED Published: 2009-12-11T16:00:00 Last Updated: 2024-08-07T06:54:09.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The distcheck rule in dist-check.mk in GNU coreutils 5.2.1 through 8.1 allows local users to gain privileges via a symlink attack on a file in a directory tree under /tmp. Additional Analyst Notes: - CVE Program Container: References: - http://www.mail-archive.com/bug-coreutils%40gnu.org/msg18779.html - http://www.osvdb.org/60853 - http://www.ubuntu.com/usn/USN-2473-1 - http://www.openwall.com/lists/oss-security/2009/12/08/4 - http://secunia.com/advisories/37645 - http://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=ae034
ity/2009/12/08/4 - http://secunia.com/advisories/37645 - http://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=ae034822c535fa5 - http://www.securityfocus.com/bid/37256 - http://marc.info/?l=oss-security&m=126030454503441&w=2 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00954.html - http://www.vupen.com/english/advisories/2009/3453 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00972.html - http://secunia.com/advisories/37860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54673 - http://secunia.com/advisories/62226 - https://bugzilla.redhat.com/show_bug.cgi?id=545439 - http://www.mail-archive.com/bug-coreutils%40gnu.org/msg
ies/62226 - https://bugzilla.redhat.com/show_bug.cgi?id=545439 - http://www.mail-archive.com/bug-coreutils%40gnu.org/msg18787.html
CVE ID: CVE-2009-4136 State: PUBLISHED Published: 2009-12-15T18:00:00 Last Updated: 2024-08-07T06:54:09.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain privileges via a table with crafted index functions, as demonstrated by functions that modify (1) search_path or (2) a prepared statement, a related issue to CVE-2007-6600 and CVE-2009-3230. Additional Analyst Notes: - CVE Program Contain
prepared statement, a related issue to CVE-2007-6600 and CVE-2009-3230. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0427.html - http://www.redhat.com/support/errata/RHSA-2010-0428.html - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://www.securitytracker.com/id?1023326 - http://secunia.com/advisories/39820 - http://www.postgresql.org/docs/current/static/release-8-2-15.html - https://bugzilla.redhat.com/show_bug.cgi?id=546321 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01035.html - http://www.postgresql.org/support/security.html - https://oval.cisecurity.org/repository/search/definit
/msg01035.html - http://www.postgresql.org/support/security.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9358 - http://www.postgresql.org/docs/current/static/release-8-4-2.html - http://www.postgresql.org/docs/current/static/release-8-0-23.html - http://www.securityfocus.com/archive/1/509917/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html - http://www.postgresql.org/docs/current/static/release-8-3-9.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01056.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:333 - http://www.postgresql.org/docs/current/static
6.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:333 - http://www.postgresql.org/docs/current/static/release-7-4-27.html - http://www.vupen.com/english/advisories/2009/3519 - http://osvdb.org/61039 - http://www.postgresql.org/docs/current/static/release-8-1-19.html - http://secunia.com/advisories/37663 - http://www.securityfocus.com/bid/37333 - http://www.redhat.com/support/errata/RHSA-2010-0429.html - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012 - http://www.vupen.com/english/advisories/2010/1197
CVE ID: CVE-2009-4137 State: PUBLISHED Published: 2009-12-24T16:00:00Z Last Updated: 2024-09-16T20:27:20.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: The loadContentFromCookie function in core/Cookie.php in Piwik before 0.5 does not validate strings obtained from cookies before calling the unserialize function, which allows remote attackers to execute arbitrary code or upload arbitrary files via vectors related to the __destruct function in the Piwik_Config class; php://filter URIs; the __destruct functions in Zend Framework, as demonstrated by the Zend_Log destructor; the shutdown functions in Zend Framework, as demonstrated by the Zend_Log_Writer_Mail class; the render f
og destructor; the shutdown functions in Zend Framework, as demonstrated by the Zend_Log_Writer_Mail class; the render function in the Piwik_View class; Smarty templates; and the _eval function in Smarty. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/12/14/2 - http://piwik.org/blog/2009/12/piwik-response-to-shocking-news-in-php-exploitation/ - http://www.suspekt.org/downloads/POC2009-ShockingNewsInPHPExploitation.pdf - http://www.openwall.com/lists/oss-security/2009/12/10/1 - http://www.openwall.com/lists/oss-security/2009/12/09/2 - http://dev.piwik.org/trac/changeset/1637 - http://www.suspekt.org/2009/12/09/advisory-032009-p
s-security/2009/12/09/2 - http://dev.piwik.org/trac/changeset/1637 - http://www.suspekt.org/2009/12/09/advisory-032009-piwik-cookie-unserialize-vulnerability/ - http://www.sektioneins.de/en/advisories/advisory-032009-piwik-cookie-unserialize-vulnerability/
CVE ID: CVE-2009-4138 State: PUBLISHED Published: 2009-12-16T19:00:00 Last Updated: 2024-08-07T06:54:09.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37339 - http://secunia.com/advisories/38276 - https://oval.cisecurity.org/repository/searc
p://www.securityfocus.com/bid/37339 - http://secunia.com/advisories/38276 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7376 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html - http://support.avaya.com/css/P8/documents/100073666 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html - https://bugzilla.redhat.com/show_bug.cgi?id=547236 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9527 - http://patchwork.kernel.org/patch/66747/ - http://www.openwall.com/lists/oss-security/2009/12/15/1 - http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.lo
penwall.com/lists/oss-security/2009/12/15/1 - http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.log - https://rhn.redhat.com/errata/RHSA-2010-0095.html - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html - https://rhn.redhat.com/errata/RHSA-2010-0046.html - http://www.debian.org/security/2010/dsa-2005 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c0c0cc2d9f4c523fde04bdfe41e4380dec8ee54 - http://secunia.com/advisories/38017
CVE ID: CVE-2009-4139 State: PUBLISHED Published: 2011-07-27T01:29:00 Last Updated: 2024-08-07T06:54:09.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Spacewalk Java site packages (aka spacewalk-java) 1.2.39 in Spacewalk, as used in the server in Red Hat Network Satellite 5.3.0 through 5.4.1 and other products, allows remote attackers to hijack the authentication of arbitrary users for requests that (1) disable the current user account, (2) add user accounts, or (3) modify user accounts to have administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1025674
rator privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1025674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68074 - https://bugzilla.redhat.com/show_bug.cgi?id=529483 - http://www.redhat.com/support/errata/RHSA-2011-0879.html
CVE ID: CVE-2009-4140 State: PUBLISHED Published: 2009-12-22T22:00:00 Last Updated: 2024-08-07T06:54:09.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when register_globals is enabled, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension through the name parameter with the code in the HTTP_RAW_POST_DATA parameter, then accessing it via a direct request to the file in tmp-upload-images/. Additio
e in the HTTP_RAW_POST_DATA parameter, then accessing it via a direct request to the file in tmp-upload-images/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37314 - http://www.osvdb.org/59051 - http://packetstormsecurity.com/files/123494/wpslimstatex-exec.txt - http://www.openwall.com/lists/oss-security/2009/12/14/3 - http://www.openwall.com/lists/oss-security/2009/12/14/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53825 - http://secunia.com/advisories/55160 - http://wordpress.org/extend/plugins/woopra/changelog/ - http://packetstormsecurity.org/0910-exploits/piwik-upload.txt - http://secunia.com/advisories/37078 - http://www.
log/ - http://packetstormsecurity.org/0910-exploits/piwik-upload.txt - http://secunia.com/advisories/37078 - http://www.exploit-db.com/exploits/24969 - http://secunia.com/advisories/55162 - http://piwik.org/blog/2009/10/piwik-response-to-secunia-advisory-sa37078/ - http://www.vupen.com/english/advisories/2009/2966 - http://packetstormsecurity.com/files/123493/wpseowatcher-exec.txt - http://secunia.com/advisories/37911
CVE ID: CVE-2009-4141 State: PUBLISHED Published: 2010-01-19T16:00:00 Last Updated: 2024-08-07T06:54:09.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the fasync_helper function in fs/fcntl.c in the Linux kernel before 2.6.33-rc4-git1 allows local users to gain privileges via vectors that include enabling O_ASYNC (aka FASYNC or FIOASYNC) on a locked file, and then closing this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.33-rc4-git1.bz2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9201 - http://www.securityfocus
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9201 - http://www.securityfocus.com/bid/37806 - http://twitter.com/taviso/statuses/7744108017 - http://support.avaya.com/css/P8/documents/100073666 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=53281b6d34d44308372d16acb7fb5327609f68b6 - http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0252.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7054 - https://bugzilla.redhat.com/show_bug.cgi?id=547906 - http://secunia.com/advisories/39033 - http://lock.cmpxchg8b.com/5ebe2294ecd0e0f08eab7690d2a6ee69/create_elf_tables.c
- http://secunia.com/advisories/39033 - http://lock.cmpxchg8b.com/5ebe2294ecd0e0f08eab7690d2a6ee69/create_elf_tables.c - http://secunia.com/advisories/38199 - https://rhn.redhat.com/errata/RHSA-2010-0095.html - https://rhn.redhat.com/errata/RHSA-2010-0046.html - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html - http://www.redhat.com/support/errata/RHSA-2010-0161.html
CVE ID: CVE-2009-4142 State: PUBLISHED Published: 2009-12-21T16:00:00 Last Updated: 2024-08-07T06:54:09.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid Shift_JIS sequences, and (3) invalid EUC-JP sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks by placing a crafted byte sequence before a special character. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37389 - http://www.php.net/releases/5_2_12.php - http://bugs.php.net/bug.php?id=49785 - http://secunia.com/advisories/4026
389 - http://www.php.net/releases/5_2_12.php - http://bugs.php.net/bug.php?id=49785 - http://secunia.com/advisories/40262 - http://marc.info/?l=bugtraq&m=127680701405735&w=2 - http://securitytracker.com/id?1023372 - http://secunia.com/advisories/37821 - http://secunia.com/advisories/38648 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://www.php.net/ChangeLog-5.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7085 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10005 - http://support.apple.com/kb/HT4077 - http://www.vupen.com/english/advisories/2009/3593 - http://www.debian
def%3A10005 - http://support.apple.com/kb/HT4077 - http://www.vupen.com/english/advisories/2009/3593 - http://www.debian.org/security/2010/dsa-2001 - http://marc.info/?l=bugtraq&m=127680701405735&w=2
CVE ID: CVE-2009-4143 State: PUBLISHED Published: 2009-12-21T16:00:00 Last Updated: 2024-08-07T06:54:09.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to (1) interrupt corruption of the SESSION superglobal array and (2) the session.save_path directive. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/releases/5_2_12.php - http://secunia.com/advisories/40262 - http://www.securityfocus.com/bid/37390 - http://marc.info/?l=bugtraq&m=127680701405735&w=2 - http://secunia.com/advisories/37821 - http://secunia.com/advisories/38648 - http
info/?l=bugtraq&m=127680701405735&w=2 - http://secunia.com/advisories/37821 - http://secunia.com/advisories/38648 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://secunia.com/advisories/41490 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995 - http://www.php.net/ChangeLog-5.php - http://www.mandriva.com/security/advisories?name=MDVSA-2010:045 - http://support.apple.com/kb/HT4077 - http://www.vupen.com/english/advisories/2009/3593 - http://www.debian.org/security/2010/dsa-2001 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995 - http://secunia.com/advisories/41480 - https://oval.cisecurity.org/repository/search
cDisplay.do?docId=emr_na-c02512995 - http://secunia.com/advisories/41480 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7439 - http://marc.info/?l=bugtraq&m=127680701405735&w=2
CVE ID: CVE-2009-4144 State: PUBLISHED Published: 2009-12-23T20:00:00 Last Updated: 2024-08-07T06:54:10.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetworkManager (NM) 0.7.2 does not ensure that the configured Certification Authority (CA) certificate file for a (1) WPA Enterprise or (2) 802.1x network remains present upon a connection attempt, which might allow remote attackers to obtain sensitive information or cause a denial of service (connectivity disruption) by spoofing the identity of a wireless network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37580 - http://www.openwall.com/lists/oss-security/2009/12/16/3 -
ainer: References: - http://www.securityfocus.com/bid/37580 - http://www.openwall.com/lists/oss-security/2009/12/16/3 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560067 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html - http://www.redhat.com/support/errata/RHSA-2010-0108.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11315 - http://secunia.com/advisories/38420 - http://git.gnome.org/browse/network-manager-applet/commit/?h=NETWORKMANAGER_APPLET_0_7&id=4020594dfbf566f1852f0acb36ad631a9e73a82b - https://bugzilla.redhat.com/show_bug.cgi?id=546795
CVE ID: CVE-2009-4145 State: PUBLISHED Published: 2009-12-23T20:00:00 Last Updated: 2024-08-07T06:54:09.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: nm-connection-editor in NetworkManager (NM) 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37580 - http://www.openwall.com/lists/oss-security/2009/12/16/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54898 - http://g
www.openwall.com/lists/oss-security/2009/12/16/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54898 - http://git.gnome.org/browse/network-manager-applet/commit/?h=NETWORKMANAGER_APPLET_0_7&id=56d87fcb86acb5359558e0a2ee702cfc0c3391f2 - https://bugzilla.redhat.com/show_bug.cgi?id=546117 - http://secunia.com/advisories/37819 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10539 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html - http://www.redhat.com/support/errata/RHSA-2010-0108.html - http://git.gnome.org/browse/network-manager-applet/commit/?h=NETWORKMANAGER_APPLET_0_7&id=8627880e07c8345f69ed639325280c7f62a8f894 -
ome.org/browse/network-manager-applet/commit/?h=NETWORKMANAGER_APPLET_0_7&id=8627880e07c8345f69ed639325280c7f62a8f894 - http://secunia.com/advisories/38420
CVE ID: CVE-2009-4146 State: PUBLISHED Published: 2009-12-02T18:00:00 Last Updated: 2024-08-07T06:54:09.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1, 7.2, and 8.0 does not clear the LD_PRELOAD environment variable, which allows local users to gain privileges by executing a setuid or setguid program with a modified LD_PRELOAD variable containing an untrusted search path that points to a Trojan horse library, a different vector than CVE-2009-4147. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37154 - http://www.securityfocus.com/
yst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37154 - http://www.securityfocus.com/archive/1/508146/100/0/threaded - http://secunia.com/advisories/37517 - http://people.freebsd.org/~cperciva/rtld.patch - http://www.securityfocus.com/archive/1/508142/100/0/threaded - http://www.securitytracker.com/id?1023250 - http://www.securityfocus.com/archive/1/508168/100/0/threaded - http://packetstormsecurity.com/files/152997/FreeBSD-rtld-execl-Privilege-Escalation.html
CVE ID: CVE-2009-4147 State: PUBLISHED Published: 2009-12-02T19:00:00 Last Updated: 2024-08-07T06:54:09.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1 and 8.0 does not clear the (1) LD_LIBMAP, (2) LD_LIBRARY_PATH, (3) LD_LIBMAP_DISABLE, (4) LD_DEBUG, and (5) LD_ELF_HINTS_PATH environment variables, which allows local users to gain privileges by executing a setuid or setguid program with a modified variable containing an untrusted search path that points to a Trojan horse library, different vectors than CVE-2009-4146. Additional Analyst Notes: - CVE Program Container: References: -
an horse library, different vectors than CVE-2009-4146. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37154 - http://www.securityfocus.com/archive/1/508146/100/0/threaded - http://secunia.com/advisories/37517 - http://people.freebsd.org/~cperciva/rtld.patch - http://www.securityfocus.com/archive/1/508142/100/0/threaded - http://www.securitytracker.com/id?1023250 - http://packetstormsecurity.com/files/152997/FreeBSD-rtld-execl-Privilege-Escalation.html
CVE ID: CVE-2009-4148 State: PUBLISHED Published: 2009-12-04T19:00:00 Last Updated: 2024-08-07T06:54:09.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: DAZ Studio 2.3.3.161, 2.3.3.163, and 3.0.1.135 allows remote attackers to execute arbitrary JavaScript code via a (1) .ds, (2) .dsa, (3) .dse, or (4) .dsb file, as demonstrated by code that loads the WScript.Shell ActiveX control, related to a "script injection vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37176 - http://www.coresecurity.com/content/dazstudio-scripting-injection - http://www.securityfocus.com/archive/1/508192/100/0/threaded