Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3643 State: PUBLISHED Published: 2009-10-09T14:18:00 Last Updated: 2024-08-07T06:38:29.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote attackers to cause a denial of service via a long argument to the (1) LIST and (2) NLST commands, a differnt issue than CVE-2008-5626 and CVE-2006-5728. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0910-exploits/XM-ftp-dos.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/53643 - http://secunia.com/advisories/36941 - http://osvdb.org/58542
CVE ID: CVE-2009-3644 State: PUBLISHED Published: 2009-10-09T14:18:00Z Last Updated: 2024-09-16T20:11:31.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Soundset (com_soundset) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat_id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36597 - http://packetstormsecurity.org/0910-exploits/joomlasoundset-sql.txt
CVE ID: CVE-2009-3645 State: PUBLISHED Published: 2009-10-09T14:18:00Z Last Updated: 2024-09-17T02:16:27.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JoomlaCache CB Resume Builder (com_cbresumebuilder) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the group_id parameter in a group_members action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0910-exploits/joomlacbrb-sql.txt - http://secunia.com/advisories/36954 - http://www.securityfocus.com/bid/36598
CVE ID: CVE-2009-3646 State: PUBLISHED Published: 2009-10-09T14:18:00 Last Updated: 2024-08-07T06:38:30.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: InterVations NaviCOPA Web Server 3.01 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53278 - http://www.exploit-db.com/exploits/9694 - http://secunia.com/advisories/33766 - http://www.osvdb.org/58386
CVE ID: CVE-2009-3647 State: PUBLISHED Published: 2009-10-09T14:18:00 Last Updated: 2024-08-07T06:38:29.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in emaullinks.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote attackers to inject arbitrary web script or HTML via the moudi parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53642
CVE ID: CVE-2009-3648 State: PUBLISHED Published: 2009-10-09T14:18:00 Last Updated: 2024-08-07T06:38:29.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Service Links 6.x-1.0, a module for Drupal, allows remote authenticated users, with 'administer content types' permissions, to inject arbitrary web script or HTML via unspecified vectors when displaying content type names. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53633 - http://www.securityfocus.com/bid/36584 - http://www.madirish.net/?article=251
CVE ID: CVE-2009-3649 State: PUBLISHED Published: 2009-10-09T14:18:00 Last Updated: 2024-08-07T06:38:30.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in forums/index.php in Power Bulletin Board (PBBoard) 2.0.2 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a new_topic action. Additional Analyst Notes: - CVE Program Container: References: - http://www.sec-area.com/?p=141%23more-141&gtlang=en - http://www.securityfocus.com/archive/1/506992/100/0/threaded
CVE ID: CVE-2009-3650 State: PUBLISHED Published: 2009-10-09T14:18:00 Last Updated: 2024-08-07T06:38:29.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Dex 5.x-1.0 and earlier and 6.x-1.0-rc1 and earlier, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53569 - http://drupal.org/node/592394 - http://www.securityfocus.com/bid/36559
CVE ID: CVE-2009-3651 State: PUBLISHED Published: 2009-10-09T14:18:00 Last Updated: 2024-08-07T06:38:29.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "Monitor browsers' feature in Browscap before 5.x-1.1 and 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/592272 - http://www.securityfocus.com/bid/36557 - http://secunia.com/advisories/36912 - http://drupal.org/node/592264 - http://drupal.org/node/592262 - http://osvdb.org/58444 - https://exchange.xforce.ibmcloud.com
//drupal.org/node/592264 - http://drupal.org/node/592262 - http://osvdb.org/58444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53571
CVE ID: CVE-2009-3652 State: PUBLISHED Published: 2009-10-09T14:18:00 Last Updated: 2024-08-07T06:38:29.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Organic Groups (OG) 5.x-7.x before 5.x-7.4, 5.x-8.x before 5.x-8.1, and 6.x-1.x before 6.x-1.4, a module for Drupal, allows remote authenticated users, with create or edit group nodes permissions, to inject arbitrary web script or HTML via the User-Agent HTTP header, a different issue than CVE-2008-3095. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/592410 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53570 - http://drupal.org/node/5
- http://drupal.org/node/592410 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53570 - http://drupal.org/node/592412 - http://secunia.com/advisories/36923 - http://drupal.org/node/592414 - http://www.securityfocus.com/bid/36558 - http://drupal.org/node/592358 - http://osvdb.org/58445
CVE ID: CVE-2009-3653 State: PUBLISHED Published: 2009-10-09T14:18:00 Last Updated: 2024-08-07T06:38:30.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the additional links interface in XML Sitemap 5.x-1.6, a module for Drupal, allows remote authenticated users, with "administer site configuration" permission, to inject arbitrary web script or HTML via unspecified vectors, related to link path output. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/591732 - http://www.securityfocus.com/bid/36556 - http://drupal.org/node/591724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53572
CVE ID: CVE-2009-3654 State: PUBLISHED Published: 2009-10-09T14:18:00 Last Updated: 2024-08-07T06:38:29.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers to create new webroot directories via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/58424 - http://drupal.org/node/592470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53553 - http://secunia.com/advisories/36925 - http://drupal.org/node/592490 - http://www.securityfocus.com/bid/36561
CVE ID: CVE-2009-3655 State: PUBLISHED Published: 2009-10-09T14:18:00 Last Updated: 2024-08-07T06:38:29.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to cause a denial of service (server crash) via unspecified vectors related to the "SITE SET TRANSFERPROGRESS ON" FTP command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36873 - http://www.serv-u.com/releasenotes/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5798
CVE ID: CVE-2009-3656 State: PUBLISHED Published: 2009-10-09T14:18:00 Last Updated: 2024-08-07T06:38:30.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Shared Sign-On 5.x and 6.x, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53559 - http://drupal.org/node/592488
CVE ID: CVE-2009-3657 State: PUBLISHED Published: 2009-10-09T14:18:00 Last Updated: 2024-08-07T06:38:29.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Shared Sign-On 5.x and 6.x, a module for Drupal, allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53560 - http://drupal.org/node/592488
CVE ID: CVE-2009-3658 State: PUBLISHED Published: 2009-10-09T14:18:00 Last Updated: 2024-08-07T06:38:29.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control (sb.dll) in America Online (AOL) 9.5.0.1 allows remote attackers to trigger memory corruption or possibly execute arbitrary code via a malformed argument to the SetSuperBuddy method. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/9sg_aol_91_superbuddy.html - http://www.vupen.com/english/advisories/2009/2812 - http://www.securityfocus.com/archive/1/506889/100/0/threaded - http://www.securityfocus.com/bid/36580 -
ies/2009/2812 - http://www.securityfocus.com/archive/1/506889/100/0/threaded - http://www.securityfocus.com/bid/36580 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6704 - http://secunia.com/advisories/36919 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53614
CVE ID: CVE-2009-3659 State: PUBLISHED Published: 2009-10-11T22:00:00 Last Updated: 2024-08-07T06:38:30.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in file/stats.php in BS Counter 2.5.3 allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53236
CVE ID: CVE-2009-3660 State: PUBLISHED Published: 2009-10-11T22:00:00 Last Updated: 2024-08-07T06:38:30.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation. Additional Analyst Notes: - CVE Program Container: References: - http://forum.efrontlearning.net/viewtopic.php?f=1&t=1354&p=7174#p7174 - http://www.exploit-db.com/exploits/9681 - http:/
http://forum.efrontlearning.net/viewtopic.php?f=1&t=1354&p=7174#p7174 - http://www.exploit-db.com/exploits/9681 - http://www.securityfocus.com/bid/36411
CVE ID: CVE-2009-3661 State: PUBLISHED Published: 2009-10-11T22:00:00 Last Updated: 2024-08-07T06:38:30.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the DJ-Catalog (com_djcatalog) component for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in a showItem action and (2) cid parameter in a show action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9693 - http://www.securityfocus.com/bid/36412 - http://secunia.com/advisories/36696 - http://www.design-joomla.eu/joomla-news/dj-catalog-sql-bsql-injection-multiple-vulnerability-fi
a.com/advisories/36696 - http://www.design-joomla.eu/joomla-news/dj-catalog-sql-bsql-injection-multiple-vulnerability-fix.html
CVE ID: CVE-2009-3662 State: PUBLISHED Published: 2009-10-11T22:00:00Z Last Updated: 2024-09-16T17:58:47.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: FileCopa FTP Server 5.01 allows remote attackers to cause a denial of service (server hang) via a large number of crafted NOOP commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36397 - http://secunia.com/advisories/36773 - http://downloads.securityfocus.com/vulnerabilities/exploits/36397.txt
CVE ID: CVE-2009-3663 State: PUBLISHED Published: 2009-10-11T22:00:00 Last Updated: 2024-08-07T06:38:30.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in the Host header. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/58129 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53205 - http://www.exploit-db.com/exploits/9657 - http://secunia.com/advisories/36734 - http://www.vupen.com/english/advisories/2009/2654 - http://httpdx.source
ts/9657 - http://secunia.com/advisories/36734 - http://www.vupen.com/english/advisories/2009/2654 - http://httpdx.sourceforge.net/downloads/changelog.log
CVE ID: CVE-2009-3664 State: PUBLISHED Published: 2009-10-11T22:00:00 Last Updated: 2024-08-07T06:38:30.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to include or execute arbitrary files via a .. (dot dot) in the (1) p and (2) s parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53217 - http://www.exploit-db.com/exploits/9625 - http://www.osvdb.org/57919 - http://www.securityfocus.com/archive/1/506380/100/0/threaded - http://secunia.com/advisories/36648
CVE ID: CVE-2009-3665 State: PUBLISHED Published: 2009-10-11T22:00:00 Last Updated: 2024-08-07T06:38:30.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) i parameter or (2) v parameters in a register action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53218 - http://www.osvdb.org/57920 - http://www.securityfocus.com/archive/1/506380/100/0/threaded - http://secunia.com/advisories/36648
CVE ID: CVE-2009-3666 State: PUBLISHED Published: 2009-10-11T22:00:00 Last Updated: 2024-08-07T06:38:30.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Nullam Blog 0.1.2 allows remote attackers to inject arbitrary web script or HTML via the e parameter in an error action. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/57921 - http://www.exploit-db.com/exploits/9625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53216 - http://www.securityfocus.com/archive/1/506380/100/0/threaded - http://secunia.com/advisories/36648
CVE ID: CVE-2009-3667 State: PUBLISHED Published: 2009-10-11T22:00:00 Last Updated: 2024-08-07T06:38:29.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in AdsDX 3.05 allows remote attackers to execute arbitrary SQL commands via the Username. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9696
CVE ID: CVE-2009-3668 State: PUBLISHED Published: 2009-10-11T22:00:00Z Last Updated: 2024-09-17T03:08:06.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ardguest.php in Ardguest 1.8 allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36630 - http://packetstormsecurity.org/0909-exploits/ardguest-xss.txt
CVE ID: CVE-2009-3669 State: PUBLISHED Published: 2009-10-11T22:00:00 Last Updated: 2024-08-07T06:38:30.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the foobla Suggestions (com_foobla_suggestions) component 1.5.11 for Joomla! allows remote attackers to execute arbitrary SQL commands via the idea_id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36425 - http://www.exploit-db.com/exploits/9697
CVE ID: CVE-2009-3670 State: PUBLISHED Published: 2009-10-11T22:00:00 Last Updated: 2024-08-07T06:38:29.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36621 - http://www.exploit-db.com/exploits/9624 - http://osvdb.org/57983
CVE ID: CVE-2009-3671 State: PUBLISHED Published: 2009-12-09T18:00:00 Last Updated: 2024-10-21T16:41:27.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3674. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072 - http://www.us-cert.
t: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072 - http://www.us-cert.gov/cas/techalerts/TA09-342A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6382 - http://www.securitytracker.com/id?1023293
CVE ID: CVE-2009-3672 State: PUBLISHED Published: 2009-12-02T11:00:00 Last Updated: 2024-08-07T06:38:30.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or (2) are deleted, which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag name, selection of the single element in the returned list, and a change to the outerHTML property of this element, related to Cascading Style Sheets (CSS) and mshtml.dll, aka "HTML Object Memory Corruption Vulnerability." NOTE: some of these details are o
Style Sheets (CSS) and mshtml.dll, aka "HTML Object Memory Corruption Vulnerability." NOTE: some of these details are obtained from third party information. NOTE: this issue was originally assigned CVE-2009-4054, but Microsoft assigned a duplicate identifier of CVE-2009-3672. CVE consumers should use this identifier instead of CVE-2009-4054. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507984/100/0/threaded - http://www.kb.cert.org/vuls/id/515749 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6381 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072 - http://ww
.mitre.oval%3Adef%3A6381 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072 - http://www.us-cert.gov/cas/techalerts/TA09-342A.html - http://www.securityfocus.com/bid/37085 - http://www.symantec.com/connect/blogs/zero-day-internet-explorer-exploit-published - http://www.microsoft.com/technet/security/advisory/977981.mspx - http://www.vupen.com/english/advisories/2009/3301 - http://secunia.com/advisories/37448 - http://www.securitytracker.com/id?1023293
CVE ID: CVE-2009-3673 State: PUBLISHED Published: 2009-12-09T18:00:00 Last Updated: 2024-08-07T06:38:29.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6519 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/m
finition/oval%3Aorg.mitre.oval%3Adef%3A6519 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072 - http://www.us-cert.gov/cas/techalerts/TA09-342A.html - http://www.securitytracker.com/id?1023293
CVE ID: CVE-2009-3674 State: PUBLISHED Published: 2009-12-09T18:00:00 Last Updated: 2024-08-07T06:38:30.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3671. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072 - http://www.us-cert.gov/cas/techalerts/TA09-3
docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072 - http://www.us-cert.gov/cas/techalerts/TA09-342A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6570 - http://www.securitytracker.com/id?1023293
CVE ID: CVE-2009-3675 State: PUBLISHED Published: 2009-12-09T18:00:00 Last Updated: 2024-08-07T06:38:30.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: LSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote authenticated users to cause a denial of service (CPU consumption) via a malformed ISAKMP request over IPsec, aka "Local Security Authority Subsystem Service Resource Exhaustion Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-069 - https://oval.cisecurity.org/repository/s
s://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6639 - http://www.us-cert.gov/cas/techalerts/TA09-342A.html
CVE ID: CVE-2009-3676 State: PUBLISHED Published: 2009-11-13T15:00:00 Last Updated: 2024-08-07T06:38:29.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service (infinite loop and system hang) via a (1) SMBv1 or (2) SMBv2 response packet that contains (a) an incorrect length value in a NetBIOS header or (b) an additional length field at the end of this response packet, aka "SMB Client Incomplete Response Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://news.cnet.com/8301-27080_3-1039