Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1064 State: PUBLISHED Published: 2009-03-24T19:00:00 Last Updated: 2024-08-07T04:57:17.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allows remote attackers to overwrite arbitrary files via whitespace and a command-line switch, followed by a full pathname, in the third argument to the download method. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/advisory-73.html - http://www.securityfocus.com/bid/34200 - https://www.exploit-db.com/exploits/8257 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49353
CVE ID: CVE-2009-1065 State: PUBLISHED Published: 2009-03-24T19:00:00 Last Updated: 2024-08-07T04:57:17.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the x parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/52834 - http://secunia.com/advisories/34364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49334
CVE ID: CVE-2009-1066 State: PUBLISHED Published: 2009-03-24T19:00:00 Last Updated: 2024-08-07T04:57:17.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the referral function in admin/lib/lib_logs.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header in a request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34189 - http://osvdb.org/52833 - http://lampsecurity.org/Pixie-CMS-Multiple-Vulnerabilities - https://www.exploit-db.com/exploits/8252 - http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0324.html - https://exchange.xforce.i
.com/exploits/8252 - http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0324.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49335 - http://secunia.com/advisories/34364
CVE ID: CVE-2009-1067 State: PUBLISHED Published: 2009-03-24T19:00:00 Last Updated: 2024-08-07T04:57:17.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to inject arbitrary web script or HTML via the x parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34189 - http://lampsecurity.org/Pixie-CMS-Multiple-Vulnerabilities - http://osvdb.org/52832 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49333 - https://www.exploit-db.com/exploits/8252 - http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0324.html - http:
tps://www.exploit-db.com/exploits/8252 - http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0324.html - http://secunia.com/advisories/34364
CVE ID: CVE-2009-1068 State: PUBLISHED Published: 2009-03-24T19:00:00 Last Updated: 2024-08-07T04:57:17.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long hostname in a .bsl playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/9sg_bsplayer_seh.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49342 - http://secunia.com/advisories/34412 - https://www.exploit-db.com/exploits/8251 - http://www.vupen.co
erabilities/49342 - http://secunia.com/advisories/34412 - https://www.exploit-db.com/exploits/8251 - http://www.vupen.com/english/advisories/2009/0800 - http://www.securityfocus.com/archive/1/502016/100/0/threaded - https://www.exploit-db.com/exploits/8249 - http://osvdb.org/52841 - http://www.securityfocus.com/bid/34190
CVE ID: CVE-2009-1069 State: PUBLISHED Published: 2009-03-24T19:00:00 Last Updated: 2024-08-07T04:57:17.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the node edit form feature in Drupal Content Construction Kit (CCK) 6.x before 6.x-2.2, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (1) titles of candidate referenced nodes in the Node reference sub-module and the (2) names of candidate referenced users in the User reference sub-module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34172 - http://osvdb.org/52784 - https://exc
es: - CVE Program Container: References: - http://www.securityfocus.com/bid/34172 - http://osvdb.org/52784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49317 - http://drupal.org/node/406520 - http://osvdb.org/52783 - http://secunia.com/advisories/34370
CVE ID: CVE-2009-1070 State: PUBLISHED Published: 2009-03-24T19:00:00 Last Updated: 2024-08-07T04:57:17.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in system/index.php in ExpressionEngine 1.6.4 through 1.6.6, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the avatar parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.ngenuity.org/wordpress/2009/01/28/ngenuity-2009-003-expressionengine-persistent-cross-site-scripting/ - http://www.securityfocus.com/archive/1/502045/100/0/threaded - http://expressionengine.com/docs/changelog.html#v167 - http://secun
.securityfocus.com/archive/1/502045/100/0/threaded - http://expressionengine.com/docs/changelog.html#v167 - http://secunia.com/advisories/34379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49359 - http://www.securityfocus.com/bid/34193
CVE ID: CVE-2009-1071 State: PUBLISHED Published: 2009-03-24T19:00:00 Last Updated: 2024-08-07T04:57:17.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Icarus 2.0 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted Portable Game Notation (.pgn) file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49309 - http://www.securityfocus.com/bid/34167 - https://www.exploit-db.com/exploits/8236 - http://osvdb.org/52780 - http://secunia.com/advisories/34368
CVE ID: CVE-2009-1072 State: PUBLISHED Published: 2009-03-25T01:00:00 Last Updated: 2024-08-07T04:57:17.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35390 - http://secunia.com/advisories/34432 - http://secunia.com/advisories/34422 - http://www.vupen.com/english/advisories/2009/0802 - http://secunia.com/advisories/34786 - http:/
.com/advisories/34422 - http://www.vupen.com/english/advisories/2009/0802 - http://secunia.com/advisories/34786 - http://www.openwall.com/lists/oss-security/2009/03/23/1 - http://www.securityfocus.com/bid/34205 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html - http://secunia.com/advisories/37471 - http://secunia.com/advisories/35656 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://thread.gmane.org/gmane.linux.kernel/805280 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html - http://secunia.com/advisories/35185 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10314 - http://w
visories/35185 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10314 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8382 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html - http://www.ubuntu.com/usn/usn-793-1 - http://www.redhat.com/support/errata/RHSA-2009-1081.html - http://www.debian.org/security/2009/dsa-1800 - http://secunia.com/advisories/35343 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.9 - https://exchange.xforce.ibmclo
a.com/advisories/35343 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49356 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=76a67ec6fb79ff3570dcb5342142c16098299911 - http://secunia.com/advisories/35121 - http://www.vupen.com/english/advisories/2009/3316 - http://secunia.com/advisories/35394
CVE ID: CVE-2009-1073 State: PUBLISHED Published: 2009-03-31T18:00:00 Last Updated: 2024-08-07T04:57:17.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/03/25/4 - http://www.openwall.com/lists/oss-security/2009/03/23/3 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520476 - http://www.securityfocus.com/bid/34211 - http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/d
ort.cgi?bug=520476 - http://www.securityfocus.com/bid/34211 - http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/debian/libnss-ldapd.postinst?r1=795&r2=813 - http://www.openwall.com/lists/oss-security/2009/03/24/2 - http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/man/nss-ldapd.conf.5.xml?r1=805&r2=806 - http://www.openwall.com/lists/oss-security/2009/03/25/3 - http://secunia.com/advisories/34523 - http://ch.tudelft.nl/~arthur/nss-ldapd/news.html#20090322 - http://launchpad.net/bugs/cve/2009-1073 - http://www.debian.org/security/2009/dsa-1758
CVE ID: CVE-2009-1074 State: PUBLISHED Published: 2009-03-25T15:00:00Z Last Updated: 2024-09-16T23:50:59.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to "ssl termination devices" and lack of support for relative URLs. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 - http://securitytracker.com/id?1021881 - http://www.securityfocus.com/bid/34191 - http://blogs.sun.com/security/entry/su
http://securitytracker.com/id?1021881 - http://www.securityfocus.com/bid/34191 - http://blogs.sun.com/security/entry/sun_alert_253267_sun_java - http://www.vupen.com/english/advisories/2009/0797 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1 - http://secunia.com/advisories/34380
CVE ID: CVE-2009-1075 State: PUBLISHED Published: 2009-03-25T15:00:00Z Last Updated: 2024-09-17T03:28:35.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the Forgot Password feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 - http://securitytracker.com/id?1021881 - http://www.securityfocus.com/bid/34191 - http://blogs.sun.co
key=1-66-253267-1 - http://securitytracker.com/id?1021881 - http://www.securityfocus.com/bid/34191 - http://blogs.sun.com/security/entry/sun_alert_253267_sun_java - http://www.vupen.com/english/advisories/2009/0797 - http://secunia.com/advisories/34380
CVE ID: CVE-2009-1076 State: PUBLISHED Published: 2009-03-25T15:00:00Z Last Updated: 2024-09-16T22:36:44.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the end-user question-based login feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1 - http://security
ument.do?assetkey=1-66-253267-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1 - http://securitytracker.com/id?1021881 - http://www.securityfocus.com/bid/34191 - http://blogs.sun.com/security/entry/sun_alert_253267_sun_java - http://www.vupen.com/english/advisories/2009/0797 - http://secunia.com/advisories/34380
CVE ID: CVE-2009-1077 State: PUBLISHED Published: 2009-03-25T15:00:00Z Last Updated: 2024-09-16T20:22:35.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Change My Password implementation in the admin interface in Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the RequiresChallenge property setting, which allows remote authenticated users to change the passwords of other users, as demonstrated by changing the administrator's password. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 - http://sunsol
ocument.do?assetkey=1-21-140936-01-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1 - http://securitytracker.com/id?1021881 - http://www.securityfocus.com/bid/34191 - http://blogs.sun.com/security/entry/sun_alert_253267_sun_java - http://www.vupen.com/english/advisories/2009/0797 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1 - http://secunia.com/advisories/34380
CVE ID: CVE-2009-1078 State: PUBLISHED Published: 2009-03-25T15:00:00Z Last Updated: 2024-09-16T19:35:51.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the expected privilege requirements for (1) deleting audit policies and (2) modifying workflows, which allows remote authenticated users to have an unspecified impact. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 - http://securitytracker.com/id?1021881 - http://www.securityfocus.com/bid/34191 - http://blogs.sun.com/security/entry/sun_alert_253267_sun_java - http://www.vu
- http://www.securityfocus.com/bid/34191 - http://blogs.sun.com/security/entry/sun_alert_253267_sun_java - http://www.vupen.com/english/advisories/2009/0797 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1 - http://secunia.com/advisories/34380
CVE ID: CVE-2009-1079 State: PUBLISHED Published: 2009-03-25T15:00:00Z Last Updated: 2024-09-16T19:45:56.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19659, 19660, and 19683. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 - http://securitytracker.com/id?1021881 - http://www.securityfocus.com/bid/34191 - http://blogs.sun.com/security/entry/sun_alert_253267_sun_java - http://www.vupen.co
://www.securityfocus.com/bid/34191 - http://blogs.sun.com/security/entry/sun_alert_253267_sun_java - http://www.vupen.com/english/advisories/2009/0797 - http://secunia.com/advisories/34380
CVE ID: CVE-2009-1080 State: PUBLISHED Published: 2009-03-25T15:00:00Z Last Updated: 2024-09-17T04:03:46.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID 19033. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 - http://securitytracker.com/id?1021881 - http://www.securityfocus.com/bid/34191 - http://blogs.sun.com/security/entry/sun_alert_253267_sun_java - http://www.vupen.com/english/advisorie
s.com/bid/34191 - http://blogs.sun.com/security/entry/sun_alert_253267_sun_java - http://www.vupen.com/english/advisories/2009/0797 - http://secunia.com/advisories/34380
CVE ID: CVE-2009-1081 State: PUBLISHED Published: 2009-03-25T15:00:00Z Last Updated: 2024-09-17T01:36:32.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19595 and 19661. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 - http://securitytracker.com/id?1021881 - http://www.securityfocus.com/bid/34191 - http://blogs.sun.com/security/entry/sun_alert_253267_sun_java - http://www.vupen.com/englis
ecurityfocus.com/bid/34191 - http://blogs.sun.com/security/entry/sun_alert_253267_sun_java - http://www.vupen.com/english/advisories/2009/0797 - http://secunia.com/advisories/34380
CVE ID: CVE-2009-1082 State: PUBLISHED Published: 2009-03-25T15:00:00Z Last Updated: 2024-09-16T18:14:35.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin Console, as demonstrated by privileges for account creation and other administrative capabilities, related to the saveNoValidate action and saveNoValidateAllowedFormsAndWorkflows IDs. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-25
solve.sun.com/search/document.do?assetkey=1-21-140936-01-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1 - http://securitytracker.com/id?1021881 - http://www.securityfocus.com/bid/34191 - http://blogs.sun.com/security/entry/sun_alert_253267_sun_java - http://www.vupen.com/english/advisories/2009/0797 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1 - http://secunia.com/advisories/34380
CVE ID: CVE-2009-1083 State: PUBLISHED Published: 2009-03-25T15:00:00Z Last Updated: 2024-09-17T00:51:28.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Linux, AIX, Solaris, and HP-UX permits "control characters" in the passwords of user accounts, which allows remote attackers to execute arbitrary commands via vectors involving "resource adapters." Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 - http://securitytracker.com/id?1021881 - http://www.securityfocus.com/bid/34191 - http://blogs.sun.com/security/entry/sun_alert_253267_sun_java
.com/id?1021881 - http://www.securityfocus.com/bid/34191 - http://blogs.sun.com/security/entry/sun_alert_253267_sun_java - http://www.vupen.com/english/advisories/2009/0797 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1 - http://secunia.com/advisories/34380
CVE ID: CVE-2009-1084 State: PUBLISHED Published: 2009-03-25T15:00:00 Last Updated: 2024-08-07T04:57:17.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1 - http://securitytracker.com/id?1021881 - http://www.securityfocus.com
.com/search/document.do?assetkey=1-21-139010-06-1 - http://securitytracker.com/id?1021881 - http://www.securityfocus.com/bid/34191 - http://blogs.sun.com/security/entry/sun_alert_253267_sun_java - http://www.vupen.com/english/advisories/2009/0797 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49607 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1 - http://secunia.com/advisories/34380
CVE ID: CVE-2009-1085 State: PUBLISHED Published: 2009-03-25T18:00:00Z Last Updated: 2024-09-17T03:08:04.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Piwik 0.2.32 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the API key and other sensitive information via a direct request for misc/cron/archive.sh. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/03/23/2 - http://dev.piwik.org/trac/ticket/599 - http://marco-ziesing.de/archives/35-Schluesselloch-in-Piwik.html
CVE ID: CVE-2009-1086 State: PUBLISHED Published: 2009-03-25T18:00:00 Last Updated: 2024-08-07T04:57:17.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a DNS resource record (RR) with a long (1) class field (clas variable) and possibly (2) TTL field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35013 - http://www.openwall.com/lists/oss-security/2009/03/24/4 - http://www.securityfocus.com/bid/34233 - http://www.nlnetlabs.nl/svn/ldns
openwall.com/lists/oss-security/2009/03/24/4 - http://www.securityfocus.com/bid/34233 - http://www.nlnetlabs.nl/svn/ldns/tags/release-1.5.0/Changelog - http://secunia.com/advisories/35065 - http://www.nlnetlabs.nl/bugs/show_bug.cgi?id=232 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://www.debian.org/security/2009/dsa-1795
CVE ID: CVE-2009-1087 State: PUBLISHED Published: 2009-03-25T18:00:00 Last Updated: 2024-08-07T04:57:17.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple argument injection vulnerabilities in PPLive.exe in PPLive 1.9.21 and earlier allow remote attackers to execute arbitrary code via a UNC share pathname in the LoadModule argument to the (1) synacast, (2) Play, (3) pplsv, or (4) ppvod URI handler. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49263 - http://secunia.com/advisori
/english/advisories/2009/0739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49263 - http://secunia.com/advisories/34327 - https://www.exploit-db.com/exploits/8215