Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-5149 State: PUBLISHED Published: 2015-11-21T11:00:00 Last Updated: 2024-08-07T07:32:22.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have predictable technician passwords, which makes it easier for remote attackers to obtain access via the web management interface, related to a "password of the day" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.borfast.com/projects/arris-password-of-the-day-generator/ - http://www.kb.cert.org/vuls/id/419568 - https://github.com/borfast/arrispwgen - https://play.google.com/store/apps/details?
p://www.kb.cert.org/vuls/id/419568 - https://github.com/borfast/arrispwgen - https://play.google.com/store/apps/details?id=me.harrygonzalez.arrispod
CVE ID: CVE-2009-5150 State: PUBLISHED Published: 2018-05-11T19:00:00 Last Updated: 2024-08-07T07:32:22.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute Computrace Agent V80.845 and V80.866 does not have a digital signature for the configuration block, which allows attackers to set up communication with a web site other than the intended search.namequery.com site by modifying data within a disk's inter-partition space. This allows a privileged local user to execute arbitrary code even after that user loses access and all disk partitions are reformatted. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/system/files/publicati
ed. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/system/files/publications/2016/05/Paper-Deactivate-the-Rootkit-AOrtega-ASacco.pdf
CVE ID: CVE-2009-5151 State: PUBLISHED Published: 2018-05-11T19:00:00 Last Updated: 2024-08-07T07:32:22.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: The stub component of Absolute Computrace Agent V70.785 executes code from a disk's inter-partition space without requiring a digital signature for that code, which allows attackers to execute code on the BIOS. This allows a privileged local user to achieve persistent control of BIOS behavior, independent of later disk changes. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/system/files/publications/2016/05/Paper-Deactivate-the-Rootkit-AOrtega-ASacco.pdf
CVE ID: CVE-2009-5152 State: PUBLISHED Published: 2018-05-11T19:00:00 Last Updated: 2024-08-07T07:32:23.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute Computrace Agent, as distributed on certain Dell Inspiron systems through 2009, has a race condition with the Dell Client Configuration Utility (DCCU), which allows privileged local users to change Computrace Agent's activation/deactivation status to the factory default via a crafted TaskResult.xml file. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/system/files/publications/2016/05/Paper-Deactivate-the-Rootkit-AOrtega-ASacco.pdf
CVE ID: CVE-2009-5153 State: PUBLISHED Published: 2018-11-21T15:00:00 Last Updated: 2024-08-07T07:32:23.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allowed remote unauthenticated attackers to execute code, because a length field was incorrectly trusted. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=515804 - https://www.zerodayinitiative.com/advisories/ZDI-09-067/ - https://download.novell.com/Download?buildid=1z3z-OsVCiE~
CVE ID: CVE-2009-5154 State: PUBLISHED Published: 2019-02-09T22:00:00 Last Updated: 2024-08-07T07:32:22.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. There is a default password of meinsm for the admin account. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/llandeilocymro/7dbe3daaab6d058d609fd9a0b24301cb - https://www.use-ip.co.uk/forum/threads/mobotix-default-password.76/
CVE ID: CVE-2009-5155 State: PUBLISHED Published: 2019-02-26T02:00:00 Last Updated: 2024-08-07T07:32:23.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match. Additional Analyst Notes: - CVE Program Container: References: - https://debbugs.gnu.org/cgi/bugreport.cgi?bug=22793 - https://security.netapp.com/advisory/ntap-20190315-0002/ - https://debbugs.gnu.org/cgi/bugreport.cgi?bug=32806 - https://sourceware.org
y.netapp.com/advisory/ntap-20190315-0002/ - https://debbugs.gnu.org/cgi/bugreport.cgi?bug=32806 - https://sourceware.org/bugzilla/show_bug.cgi?id=18986 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=eb04c21373e2a2885f3d52ff192b0499afe3c672 - http://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=5513b40999149090987a0341c018d05d3eea1272 - https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34238 - https://sourceware.org/bugzilla/show_bug.cgi?id=11053 - https://support.f5.com/csp/article/K64119434 - https://support.f5.com/csp/article/K64119434?utm_source=f5support&amp%3Butm_medium=RSS - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissue
m_medium=RSS - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2009-5156 State: PUBLISHED Published: 2019-06-11T20:46:14 Last Updated: 2024-08-07T07:32:23.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on ASMAX AR-804gu 66.34.1 devices. There is Command Injection via the cgi-bin/script query string. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/35153 - https://www.securityfocus.com/archive/1/503946
CVE ID: CVE-2009-5157 State: PUBLISHED Published: 2019-06-11T20:46:23 Last Updated: 2024-08-07T07:32:23.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Linksys WAG54G2 1.00.10 devices, there is authenticated command injection via shell metacharacters in the setup.cgi c4_ping_ipaddr variable. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/35142 - https://www.securityfocus.com/archive/1/503934
CVE ID: CVE-2009-5158 State: PUBLISHED Published: 2019-08-22T12:39:41 Last Updated: 2024-08-07T07:32:23.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML sanitization for Google Analytics API text. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/google-analyticator/#developers
CVE ID: CVE-2009-5159 State: PUBLISHED Published: 2020-03-13T14:20:59 Last Updated: 2024-08-07T07:32:23.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Power Board (aka IPB or IP.Board) 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/37263/info - https://www.exploit-db.com/exploits/33394 - https://packetstormsecurity.com/files/83624/Invision-Power-Board-3.0.4-Cross-Site-Scripting.html - http://community.invisionpower.com/topic/300051-invision-power-board-305-released/
CVE ID: CVE-2010-0001 State: PUBLISHED Published: 2010-01-29T18:00:00 Last Updated: 2024-08-07T00:30:47.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading to an array index error. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38220 - http://secunia.com/advisories/40655 - http://support.apple.com/kb/HT4435 - http://www.vupen.com/english/ad
ories/38220 - http://secunia.com/advisories/40655 - http://support.apple.com/kb/HT4435 - http://www.vupen.com/english/advisories/2010/0185 - http://ncompress.sourceforge.net/#status - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083 - http://www.ubuntu.com/usn/USN-889-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10546 - http://securitytracker.com/id?1023490 - http://www.vupen.com/english/advisories/2010/1872 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083 - https://bugzilla.redhat.com/show_bug.cgi?id=554418 - http://git.savannah.gnu.org/cgit/gzip.git/commit/?id=a3db5806d012082b9e25cc36d09f19cd736a468f - ht
w_bug.cgi?id=554418 - http://git.savannah.gnu.org/cgit/gzip.git/commit/?id=a3db5806d012082b9e25cc36d09f19cd736a468f - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://www.debian.org/security/2010/dsa-1974 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:020 - http://secunia.com/advisories/40689 - http://secunia.com/advisories/40551 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7511 - http://secunia.com/advisories/38223 - http://savannah.gnu.org/forum/forum.php?forum_id=6153 - http://www.debian.org/security/2010/dsa-2074 - http://www.vupen.com/english/advisories/2010/1796 - http://www.redhat.com/support/
w.debian.org/security/2010/dsa-2074 - http://www.vupen.com/english/advisories/2010/1796 - http://www.redhat.com/support/errata/RHSA-2010-0061.html - https://rhn.redhat.com/errata/RHSA-2010-0095.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:019 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:152 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://secunia.com/advisories/38225 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - http://secunia.com/advisories/38232 - http://www.osvdb.org/61869
CVE ID: CVE-2010-0002 State: PUBLISHED Published: 2010-01-14T18:00:00Z Last Updated: 2024-09-16T20:17:23.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LS_OPTIONS, which allows local users to send escape sequences to terminal emulators, or hide the existence of a file, via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:004 - https://qa.mandriva.com/show_bug.cgi?id=56882
CVE ID: CVE-2010-0003 State: PUBLISHED Published: 2010-01-26T18:00:00 Last Updated: 2024-08-07T00:30:47.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local users to cause a denial of service (system slowdown or crash) by jumping to an address. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/01/12/1 - https://rhn.redhat.com/er
CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/01/12/1 - https://rhn.redhat.com/errata/RHSA-2010-0146.html - http://www.redhat.com/support/errata/RHSA-2010-0147.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.4 - http://www.securityfocus.com/bid/37724 - http://secunia.com/advisories/38779 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html - http://patchwork.kernel.org/patch/69752/ - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034250.html - http://www.debian.org/security/2010/dsa-1996 - http://secunia.com/ad
permail/package-announce/2010-January/034250.html - http://www.debian.org/security/2010/dsa-1996 - http://secunia.com/advisories/43315 - http://secunia.com/advisories/39033 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b45c6e76bc2c72f6426c14bed64fdcbc9bf37cb0 - http://secunia.com/advisories/38333 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://www.openwall.com/lists/oss-security/2010/01/13/4 - https://bugzilla.redhat.com/show_bug.cgi?id=554578 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10550 - http://www.debian.org/security/2010/dsa-2005 - http://www.securityfocus.com/archive/1/516397/1
itre.oval%3Adef%3A10550 - http://www.debian.org/security/2010/dsa-2005 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html - http://secunia.com/advisories/38492 - http://www.redhat.com/support/errata/RHSA-2010-0161.html
CVE ID: CVE-2010-0004 State: PUBLISHED Published: 2010-01-29T18:00:00Z Last Updated: 2024-09-16T23:51:34.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root, which might allow remote attackers to discover private root names by reading this view. Additional Analyst Notes: - CVE Program Container: References: - http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2242&r2=2313&pathrev=HEAD - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01421.html - http://www.openwall.com/lists/oss-security/2010/01/13/5 - https://www.redhat.com/archives/fedora-package-a
g01421.html - http://www.openwall.com/lists/oss-security/2010/01/13/5 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01464.html - http://www.openwall.com/lists/oss-security/2010/01/11/2 - http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/trunk/docs/release-notes/1.1.0.html?revision=2222 - http://www.openwall.com/lists/oss-security/2010/01/14/4 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2300
CVE ID: CVE-2010-0005 State: PUBLISHED Published: 2010-01-29T18:00:00Z Last Updated: 2024-09-16T17:38:01.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported authorizer for a root, which might allow remote attackers to bypass intended access restrictions via a query. Additional Analyst Notes: - CVE Program Container: References: - http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2242&r2=2313&pathrev=HEAD - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01421.html - http://www.openwall.com/lists/oss-security/2010/01/13/5 - https:/
/fedora-package-announce/2009-December/msg01421.html - http://www.openwall.com/lists/oss-security/2010/01/13/5 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01464.html - http://www.openwall.com/lists/oss-security/2010/01/11/2 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2300
CVE ID: CVE-2010-0006 State: PUBLISHED Published: 2010-01-26T18:00:00 Last Updated: 2024-08-07T00:30:47.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.32.4, when network namespaces are enabled, allows remote attackers to cause a denial of service (NULL pointer dereference) via an invalid IPv6 jumbogram, a related issue to CVE-2007-4567. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37810 - http://bugs.gentoo.org/show_bug.cgi?id=300951 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.4 - http://www.osvdb.org/61876 - http://security
d=300951 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.4 - http://www.osvdb.org/61876 - http://security-tracker.debian.org/tracker/CVE-2010-0006 - http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034250.html - http://secunia.com/advisories/38168 - https://bugzilla.redhat.com/show_bug.cgi?id=555217 - http://marc.info/?l=linux-netdev&m=126343325807340&w=2 - http://cert.fi/en/reports/2010/vulnerability341748.html - http://secunia.com/advisories/38333 - http://www.openwall.com/lists/oss-security/2010/01/14/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2570a4f5428bcdb1077622342181755741e7fa60 - http://lists.opensuse.org/
x/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2570a4f5428bcdb1077622342181755741e7fa60 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html
CVE ID: CVE-2010-0007 State: PUBLISHED Published: 2010-01-19T16:00:00 Last Updated: 2024-08-07T00:30:47.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure arbitrary network-traffic filtering via a modified ebtables application. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2010-0146.html - http://www.redhat.com/support/errata/RHSA-2010-0147.html - http://
- https://rhn.redhat.com/errata/RHSA-2010-0146.html - http://www.redhat.com/support/errata/RHSA-2010-0147.html - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00008.html - http://www.openwall.com/lists/oss-security/2010/01/14/3 - http://secunia.com/advisories/38779 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dce766af541f6605fa9889892c0280bab31c66ab - http://secunia.com/advisories/38296 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html - http://www.securityfocus.com/bid/37762 - http://www.mandriva.com/security/advisories?name=MDVSA-201
0-03/msg00000.html - http://www.securityfocus.com/bid/37762 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034250.html - http://www.debian.org/security/2010/dsa-1996 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc4 - http://secunia.com/advisories/38133 - http://secunia.com/advisories/43315 - http://www.openwall.com/lists/oss-security/2010/01/14/1 - http://www.vupen.com/english/advisories/2010/0109 - http://secunia.com/advisories/39033 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html - http://secunia.com/advisories/38333 - http://www.vmware.com/secu
.org/opensuse-security-announce/2010-02/msg00007.html - http://secunia.com/advisories/38333 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9630 - https://bugzilla.redhat.com/show_bug.cgi?id=555238 - http://www.debian.org/security/2010/dsa-2005 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/55602 - http://secunia.com/advisories/38492 - http://www.redhat.com/support/errata/RHSA-2010-0161.html
CVE ID: CVE-2010-0008 State: PUBLISHED Published: 2010-03-19T19:00:00 Last Updated: 2024-08-07T00:30:47.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sctp_rcv_ootb function in the SCTP implementation in the Linux kernel before 2.6.23 allows remote attackers to cause a denial of service (infinite loop) via (1) an Out Of The Blue (OOTB) chunk or (2) a chunk of zero length. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39295 - https://rhn.redhat.com/errata/RHSA-2010-0146.html - http://www.redhat.com/support/errata/RHSA-2010-0147.html - http://www.openwall.com/lists/oss-security/2010/03/17/2 - http://git.kernel.org/?p=linux/k
/errata/RHSA-2010-0147.html - http://www.openwall.com/lists/oss-security/2010/03/17/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ece25dfa0991f65c4e1d26beb1c3c45bda4239b8 - http://secunia.com/advisories/43315 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11160 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://www.redhat.com/support/errata/RHSA-2010-0342.html - http://www.securityfocus.com/archive/1/516397/100/0/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=555658
CVE ID: CVE-2010-0009 State: PUBLISHED Published: 2010-04-05T16:00:00 Last Updated: 2024-08-07T00:30:47.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39116 - https://bugzilla.redhat.com/show_bug.cgi?id=578572 - http://www.securityfocus.com/archive/1/510427/100/0/threaded - http://secunia.com/advisories/39146 - http://archives.neohapsis.com/archives/bugtraq/2010-03/0267.html - http://couchdb.apache.org
unia.com/advisories/39146 - http://archives.neohapsis.com/archives/bugtraq/2010-03/0267.html - http://couchdb.apache.org/security.html - http://www.osvdb.org/63350
CVE ID: CVE-2010-0010 State: PUBLISHED Published: 2010-02-02T16:25:00 Last Updated: 2024-08-07T00:30:46.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0240 - http://httpd.apache.org/dev/dist/CHANGES_1.3.42 - http://marc.info/?l=bugtraq&m=130497311408250
h/advisories/2010/0240 - http://httpd.apache.org/dev/dist/CHANGES_1.3.42 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7923 - http://secunia.com/advisories/39656 - http://secunia.com/advisories/38319 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55941 - http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0589.html - http://blog.pi3.com.pl/?p=69 - http://www.securityfocus.com/archive/1/509185/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://site.pi3.com.pl/adv/mod_proxy.txt - ht