Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3484 State: PUBLISHED Published: 2009-09-30T15:00:00 Last Updated: 2024-08-07T06:31:10.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Core FTP 2.1 build 1612 allows user-assisted remote attackers to execute arbitrary code via a long hostname in an FTP server entry in a site backup file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/58385 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53488 - http://secunia.com/advisories/36872 - http://www.packetstormsecurity.org/0909-exploits/coreftp_local.py.txt
CVE ID: CVE-2009-3485 State: PUBLISHED Published: 2009-09-30T15:00:00Z Last Updated: 2024-09-16T19:46:14.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2784 - http://www.securityfocus.com/bid/36537 - http://secunia.com/advisories/36829 - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-08
CVE ID: CVE-2009-3486 State: PUBLISHED Published: 2009-09-30T15:00:00Z Last Updated: 2024-09-17T00:42:29.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to (1) the pinghost program, reachable through the diagnose program; or (2) the traceroute program, reachable through the diagnose program; or (3) the probe-limit parameter to the configuration program; the (4) wizard-ids or (5) pager-new-identifier parameter in a firewall-filters action to the configuration program; (6) the cos-phys
rd-ids or (5) pager-new-identifier parameter in a firewall-filters action to the configuration program; (6) the cos-physical-interface-name parameter in a cos-physical-interfaces-edit action to the configuration program; the (7) wizard-args or (8) wizard-ids parameter in an snmp action to the configuration program; the (9) username or (10) fullname parameter in a users action to the configuration program; or the (11) certname or (12) certbody parameter in a local-cert (aka https) action to the configuration program. Additional Analyst Notes: - CVE Program Container: References: - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-09 - http://www.vupen.com/english/advisories
ces: - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-09 - http://www.vupen.com/english/advisories/2009/2784 - http://www.securityfocus.com/bid/36537 - http://secunia.com/advisories/36829
CVE ID: CVE-2009-3487 State: PUBLISHED Published: 2009-09-30T15:00:00Z Last Updated: 2024-09-16T18:29:08.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via (1) the JEXEC_OUTID parameter in a JEXEC_MODE_RELAY_OUTPUT action to the jexec program; the (2) act, (3) refresh-time, or (4) ifid parameter to scripter.php; (5) the revision parameter in a rollback action to the configuration program; the m[] parameter to the (6) monitor, (7) manage, (8) events, (9) configuration, or (10) alarms program; (11) the m[]
; the m[] parameter to the (6) monitor, (7) manage, (8) events, (9) configuration, or (10) alarms program; (11) the m[] parameter to the default URI; (12) the m[] parameter in a browse action to the default URI; (13) the wizard-next parameter in an https action to the configuration program; or the (14) Contact Information, (15) System Description, (16) Local Engine ID, (17) System Location, or (18) System Name Override SNMP parameter, related to the configuration program. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2784 - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-10 - http://www.securityfocus.com/bid
s/2009/2784 - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-10 - http://www.securityfocus.com/bid/36537 - http://secunia.com/advisories/36829
CVE ID: CVE-2009-3488 State: PUBLISHED Published: 2009-09-30T15:00:00 Last Updated: 2024-08-07T06:31:10.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Bibliography (aka Biblio) module 6.x-1.6 for Drupal allows remote authenticated users, with certain content-creation privileges, to inject arbitrary web script or HTML via the Title field, probably a different vulnerability than CVE-2009-3479. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36521 - http://secunia.com/advisories/36834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53483 - http://seclists.org/fulldisclosure/
.com/advisories/36834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53483 - http://seclists.org/fulldisclosure/2009/Sep/0373.html
CVE ID: CVE-2009-3489 State: PUBLISHED Published: 2009-09-30T15:00:00 Last Updated: 2024-08-07T06:31:10.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36542 - http://www.vupen.com/english/advisories/2009/2798 - http://www.securityfocus.com/archiv
ww.securityfocus.com/bid/36542 - http://www.vupen.com/english/advisories/2009/2798 - http://www.securityfocus.com/archive/1/506806/100/0/threaded - http://blogs.adobe.com/psirt/2009/09/potential_photoshop_elements_8.html - http://www.securitytracker.com/id?1022963 - http://retrogod.altervista.org/9sg_adobe_pe_local.html - http://secunia.com/advisories/36895
CVE ID: CVE-2009-3490 State: PUBLISHED Published: 2009-09-30T15:00:00 Last Updated: 2024-08-07T06:31:09.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://permalink.gmane.org/gmane.comp.web.wget.general/8972 - http://marc.info/?l=oss-security&m=125369675820512&w=2 - http://www.vupen.com/english/ad
ne.comp.web.wget.general/8972 - http://marc.info/?l=oss-security&m=125369675820512&w=2 - http://www.vupen.com/english/advisories/2009/2498 - https://bugzilla.redhat.com/show_bug.cgi?id=520454 - http://addictivecode.org/pipermail/wget-notify/2009-August/001808.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://secunia.com/advisories/36540 - http://www.securityfocus.com/bid/36205 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11099 - http://hg.addictivecode.org/wget/mainline/rev/1eab157d3be7 - http://marc.info/?l=oss-security&m=125198917018936&w=2
CVE ID: CVE-2009-3491 State: PUBLISHED Published: 2009-09-30T15:00:00Z Last Updated: 2024-09-16T23:45:49.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Kinfusion SportFusion (com_sportfusion) component 0.2.2 through 0.2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid[0] parameter in a teamdetail action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0909-exploits/joomlasportfusion-sql.txt - http://secunia.com/advisories/36844 - http://www.securityfocus.com/bid/36481
CVE ID: CVE-2009-3492 State: PUBLISHED Published: 2009-09-30T15:00:00 Last Updated: 2024-08-07T06:31:10.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Loggix Project 9.4.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathToIndex parameter to (1) Calendar.php, (2) Comment.php, (3) Rss.php and (4) Trackback.php in lib/Loggix/Module/; and (5) modules/downloads/lib/LM_Downloads.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53402
CVE ID: CVE-2009-3493 State: PUBLISHED Published: 2009-09-30T15:00:00 Last Updated: 2024-08-07T06:31:09.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Zenas PaoBacheca Guestbook 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) scrivi.php and (2) index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53323 - http://osvdb.org/58163 - http://packetstormsecurity.org/0909-exploits/paobacheca-xss.txt - http://secunia.com/advisories/36741 - http://osvdb.org/58164
CVE ID: CVE-2009-3494 State: PUBLISHED Published: 2009-09-30T15:00:00 Last Updated: 2024-08-07T06:31:10.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in T-HTB Manager 0.5, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in a delete_category action, (2) the name parameter in an update_category action, and other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/506386/100/0/threaded - http://www.exploit-db.com/exploits/9637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53145
CVE ID: CVE-2009-3495 State: PUBLISHED Published: 2009-09-30T15:00:00Z Last Updated: 2024-09-16T20:17:08.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the mag_id parameter, a different vector than CVE-2008-4465. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36487 - http://www.vupen.com/english/advisories/2009/2735 - http://secunia.com/advisories/36843 - http://antisecurity.org/dvd-zone-view_mag-phpmag_id-bsqlxss-multiple-remote-vulnerabilities.antisecurity
CVE ID: CVE-2009-3496 State: PUBLISHED Published: 2009-09-30T15:00:00Z Last Updated: 2024-09-16T17:42:43.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to inject arbitrary web script or HTML via the mag_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36487 - http://www.vupen.com/english/advisories/2009/2735 - http://secunia.com/advisories/36843 - http://antisecurity.org/dvd-zone-view_mag-phpmag_id-bsqlxss-multiple-remote-vulnerabilities.antisecurity
CVE ID: CVE-2009-3497 State: PUBLISHED Published: 2009-09-30T15:00:00Z Last Updated: 2024-09-16T23:30:43.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_listing.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36812 - http://www.packetstormsecurity.org/0909-exploits/realestaterealtors-sql.txt
CVE ID: CVE-2009-3498 State: PUBLISHED Published: 2009-09-30T15:00:00Z Last Updated: 2024-09-17T02:47:09.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in php/update_article_hits.php in HBcms 1.7 allows remote attackers to execute arbitrary SQL commands via the article_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0909-exploits/hbcms-sql.txt - http://secunia.com/advisories/36854
CVE ID: CVE-2009-3499 State: PUBLISHED Published: 2009-09-30T15:00:00Z Last Updated: 2024-09-16T16:47:41.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in employee.aspx in BPowerHouse BPLawyerCaseDocuments 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2733 - http://antisecurity.org/bplawyercasedocument-1-0-mssql-vulnerabilities.antisecurity - http://secunia.com/advisories/36796
CVE ID: CVE-2009-3500 State: PUBLISHED Published: 2009-09-30T15:00:00Z Last Updated: 2024-09-16T20:16:28.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in BPowerHouse BPGames 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter to main.php and (2) game_id parameter to game.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36828 - http://packetstormsecurity.org/0909-exploits/bpgames-sql.txt - http://www.vupen.com/english/advisories/2009/2742
CVE ID: CVE-2009-3501 State: PUBLISHED Published: 2009-09-30T15:00:00 Last Updated: 2024-08-07T06:31:10.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in students.php in BPowerHouse BPStudents 1.0 allows remote attackers to execute arbitrary SQL commands via the test parameter in a preview action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/58293 - http://www.vupen.com/english/advisories/2009/2741 - http://secunia.com/advisories/36826 - http://packetstormsecurity.org/0909-exploits/bpstudent-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/53428
CVE ID: CVE-2009-3502 State: PUBLISHED Published: 2009-09-30T15:00:00Z Last Updated: 2024-09-16T21:04:29.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in music.php in BPowerHouse BPMusic 1.0 allows remote attackers to execute arbitrary SQL commands via the music_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2740 - http://packetstormsecurity.org/0909-exploits/bpmusic-sql.txt - http://secunia.com/advisories/36824
CVE ID: CVE-2009-3503 State: PUBLISHED Published: 2009-09-30T15:00:00Z Last Updated: 2024-09-17T00:31:09.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in search.aspx in BPowerHouse BPHolidayLettings 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) rid and (2) tid parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2744 - http://secunia.com/advisories/36833 - http://packetstormsecurity.org/0909-exploits/bpholidaylettings-sql.txt
CVE ID: CVE-2009-3504 State: PUBLISHED Published: 2009-09-30T15:00:00Z Last Updated: 2024-09-16T23:30:44.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in offers_buy.php in Alibaba Clone 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36845 - http://packetstormsecurity.org/0909-exploits/alibaba30-sql.txt - http://www.vupen.com/english/advisories/2009/2737
CVE ID: CVE-2009-3505 State: PUBLISHED Published: 2009-09-30T15:00:00 Last Updated: 2024-08-07T06:31:10.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_news.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter. NOTE: the game_id vector is already covered by CVE-2008-4460. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0909-exploits/mmorpgzone-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/53436 - http://www.securityfocus.com/bid/36483 - http://www.vupen.com/english/advisories/2009/2734
CVE ID: CVE-2009-3506 State: PUBLISHED Published: 2009-10-01T14:00:00 Last Updated: 2024-08-07T06:31:10.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CMSphp 0.21 allow remote attackers to inject arbitrary web script or HTML via the (1) cook_user parameter to index.php and the (2) name parameter to modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9311 - http://secunia.com/advisories/36075
CVE ID: CVE-2009-3507 State: PUBLISHED Published: 2009-10-01T14:00:00 Last Updated: 2024-08-07T06:31:10.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9311 - http://secunia.com/advisories/36075
CVE ID: CVE-2009-3508 State: PUBLISHED Published: 2009-10-01T14:00:00 Last Updated: 2024-08-07T06:31:10.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in MUJE CMS 1.0.4.34 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) _class parameter to admin.php and the (2) url parameter to install/install.php; and allow remote authenticated administrators to read arbitrary files via a .. (dot dot) in the (3) _htmlfile parameter to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9314 - http://secunia.com/advisories/36079
CVE ID: CVE-2009-3509 State: PUBLISHED Published: 2009-10-01T14:00:00 Last Updated: 2024-08-07T06:31:10.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/admin_index.php in CJ Dynamic Poll PRO 2.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0907-exploits/cjdynamicpoll-xss.txt - http://secunia.com/advisories/35799 - http://www.osvdb.org/56181 - http://www.vupen.com/english/advisories/2009/1983 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51925
CVE ID: CVE-2009-3510 State: PUBLISHED Published: 2009-10-01T14:00:00 Last Updated: 2024-08-07T06:31:10.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewListing.php in linkSpheric 0.74 Beta 6 allows remote attackers to execute arbitrary SQL commands via the listID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9316
CVE ID: CVE-2009-3511 State: PUBLISHED Published: 2009-10-01T14:00:00 Last Updated: 2024-08-07T06:31:10.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in justVisual 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the fs_jVroot parameter to (1) sites/site/pages/index.php, (2) sites/test/pages/contact.php, (3) system/pageTemplate.php, and (4) system/utilities.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9308
CVE ID: CVE-2009-3512 State: PUBLISHED Published: 2009-10-01T14:00:00 Last Updated: 2024-08-07T06:31:10.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MyWeight 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date parameter to user_addfood.php, info parameter to (2) user_forgot_pwd_form.php and (3) user_login.php, and (4) return parameter to user_login.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/55998 - http://secunia.com/advisories/35919 - http://www.osvdb.org/55999 - http://www.osvdb.org/55997 - http://packetstormsecurity.org/0907-exploits/mywe
ries/35919 - http://www.osvdb.org/55999 - http://www.osvdb.org/55997 - http://packetstormsecurity.org/0907-exploits/myweight-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/51861
CVE ID: CVE-2009-3513 State: PUBLISHED Published: 2009-10-01T14:00:00 Last Updated: 2024-08-07T06:31:10.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to courses_login.php, the id parameter to (2) news_read.php or (3) lessons_login.php, or (4) the cur parameter in a start action to lessons_login.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52072 - http://packetstormsecurity.org/0907-explo
s.com/bid/35834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52072 - http://packetstormsecurity.org/0907-exploits/etraining-xss.txt
CVE ID: CVE-2009-3514 State: PUBLISHED Published: 2009-10-01T14:00:00 Last Updated: 2024-08-07T06:31:10.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in d.net CMS allow remote attackers to execute arbitrary SQL commands via (1) the page parameter to index.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the (2) edit_id and (3) _p parameter in a news action to dnet_admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9312
CVE ID: CVE-2009-3515 State: PUBLISHED Published: 2009-10-01T14:00:00 Last Updated: 2024-08-07T06:31:10.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in dnet_admin/index.php in d.net CMS allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the type parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9312
CVE ID: CVE-2009-3516 State: PUBLISHED Published: 2009-10-01T15:00:00 Last Updated: 2024-08-07T06:31:10.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2788 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ5039
6 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6318 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024 - http://www.securityfocus.com/bid/36545 - http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc