Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0164 State: PUBLISHED Published: 2009-04-24T15:00:00 Last Updated: 2024-08-07T04:24:18.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=490597 - http://security.gentoo.org/glsa/glsa-200904-20.xml - http://www.cups.org/str.php?L3118 - http://www.cups.org/articles.php?L582 - http://support.apple.com/kb/HT3549 - http://wiki.rpath.com/Advisories:rPSA-2009-0061 - http://secunia.com/a
s.php?L582 - http://support.apple.com/kb/HT3549 - http://wiki.rpath.com/Advisories:rPSA-2009-0061 - http://secunia.com/advisories/35074 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/archive/1/502750/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://bugs.gentoo.org/show_bug.cgi?id=263070 - http://www.vupen.com/english/advisories/2009/1297 - http://www.securityfocus.com/bid/34665
CVE ID: CVE-2009-0165 State: PUBLISHED Published: 2009-04-23T19:11:00 Last Updated: 2024-08-07T04:24:17.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "g*allocn." Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1793 - http://support.apple.com/kb/HT3639 - http://www.debian.org/security/2009/dsa-1790 - http://secunia.com/advisories/35037 - http://www.vupen.com/english/advisories/2009/1621 - http://support.apple.com/kb/HT3549 - http://slackware.com/security/
http://www.vupen.com/english/advisories/2009/1621 - http://support.apple.com/kb/HT3549 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477 - http://bugs.gentoo.org/show_bug.cgi?id=263028 - http://secunia.com/advisories/35074 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://secunia.com/advisories/35065 - http://www.securityfocus.com/bid/34568 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html - http://secunia.com/advisories/34991 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:101 - http://lists.op
http://secunia.com/advisories/34991 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:101 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://secunia.com/advisories/35685 - http://www.vupen.com/english/advisories/2009/1297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50377 - http://secunia.com/advisories/34852 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://secunia.com/advisories/34959
CVE ID: CVE-2009-0166 State: PUBLISHED Published: 2009-04-23T17:00:00 Last Updated: 2024-08-07T04:24:18.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1793 - http://security.gentoo.org/glsa/glsa-200904-20.xml - http://secunia.com/advisories/34963 - http://www.debian.org/security/2009/dsa-1790 - http://secunia.com/advisories/35037 - http://www.vupen.com/eng
es/34963 - http://www.debian.org/security/2009/dsa-1790 - http://secunia.com/advisories/35037 - http://www.vupen.com/english/advisories/2009/1077 - http://secunia.com/advisories/35064 - http://www.vupen.com/english/advisories/2009/1066 - http://secunia.com/advisories/34481 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477 - http://www.redhat.com/support/errata/RHSA-2009-0431.html - http://www.vupen.com/english/advisories/2009/1065 - http://wiki.rpath.com/Advisories:rPSA-2009-0061 - http://www.redhat.com/support/errata/RHSA-2009-0430.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html - http://secunia.com/advi
09-0430.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html - http://secunia.com/advisories/35618 - http://secunia.com/advisories/35065 - http://www.redhat.com/support/errata/RHSA-2009-0480.html - http://www.securityfocus.com/bid/34568 - http://www.securityfocus.com/archive/1/502750/100/0/threaded - http://www.vupen.com/english/advisories/2010/1040 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html - http://rhn.redhat.com/errata/RHSA-2009-0458.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html - http://secunia.com/advisories/34991 - https://bugzilla.redhat.com/show_bug.cgi?id=490625 - http://www.
e/msg01291.html - http://secunia.com/advisories/34991 - https://bugzilla.redhat.com/show_bug.cgi?id=490625 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:101 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:087 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://secunia.com/advisories/35685 - http://secunia.com/advisories/34756 - http://secunia.com/advisories/34291 - http://secunia.com/advisories/34755 - http://secunia.com/advisories/34852 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html - http://secunia.com/advisories/349
ml - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html - http://secunia.com/advisories/34959 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9778 - http://www.redhat.com/support/errata/RHSA-2009-0429.html - http://www.securitytracker.com/id?1022073
CVE ID: CVE-2009-0167 State: PUBLISHED Published: 2009-01-16T21:00:00 Last Updated: 2024-08-07T04:24:18.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to cause a denial of service via unspecified vectors, related to enumeration of "wrong printers," aka a "Temporary file vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://opensolaris.org/os/bug_reports/request_sponsor/ - http://www.vupen.com/english/advisories/2009/0155 - http://support.avaya.com/elmodocs2/security/ASA-2009-026.htm - http://secunia.com/advisories/33488 - http://s
009/0155 - http://support.avaya.com/elmodocs2/security/ASA-2009-026.htm - http://secunia.com/advisories/33488 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-139390-01-1 - http://www.securitytracker.com/id?1021601 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6175 - http://www.securityfocus.com/bid/33269 - http://secunia.com/advisories/33705 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-249306-1
CVE ID: CVE-2009-0168 State: PUBLISHED Published: 2009-01-16T21:00:00 Last Updated: 2024-08-07T04:24:18.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ppdmgr in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to cause a denial of service via unspecified vectors, related to a failure to "include all cache files," and improper handling of temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://opensolaris.org/os/bug_reports/request_sponsor/ - http://www.vupen.com/english/advisories/2009/0155 - http://support.avaya.com/elmodocs2/security/ASA-2009-026.htm - http://secunia.com/advisories/33488
visories/2009/0155 - http://support.avaya.com/elmodocs2/security/ASA-2009-026.htm - http://secunia.com/advisories/33488 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-139390-01-1 - http://www.securitytracker.com/id?1021601 - http://www.securityfocus.com/bid/33269 - http://secunia.com/advisories/33705 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-249306-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48143
CVE ID: CVE-2009-0169 State: PUBLISHED Published: 2009-01-16T21:00:00 Last Updated: 2024-08-07T04:24:17.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021604 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1 - http://www.vupen.com/english/advisories/2009/0157 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-249106-1 - http://w
ww.vupen.com/english/advisories/2009/0157 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-249106-1 - http://www.securityfocus.com/bid/33266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47944
CVE ID: CVE-2009-0170 State: PUBLISHED Published: 2009-01-16T21:00:00 Last Updated: 2024-08-07T04:24:18.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1 - http://www.securityfocus.com/bid/33265 - http://www.securitytracker.com/id?1021605 - http://sunsolve.sun.com/search/document.do?assetkey=1-2
ocus.com/bid/33265 - http://www.securitytracker.com/id?1021605 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-242166-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47942 - http://www.vupen.com/english/advisories/2009/0156
CVE ID: CVE-2009-0171 State: PUBLISHED Published: 2009-01-16T21:00:00 Last Updated: 2024-08-07T04:24:18.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to use the manufacturing root password, perform a root login to the eXtended System Control Facility Unit (aka XSCFU or Service Processor), and have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0207 - http://www.securityfocus.com/bid/33280 - http://www.securitytracker.com/id?1021602 - http://sunsolve.sun.com/search/document.
//www.securityfocus.com/bid/33280 - http://www.securitytracker.com/id?1021602 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-249126-1
CVE ID: CVE-2009-0172 State: PUBLISHED Published: 2009-01-16T21:00:00 Last Updated: 2024-08-07T04:24:18.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to cause a denial of service (infinite loop) via a crafted CONNECT data stream. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ36534 - http://securitytracker.com/id?1021591 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARL
tp://securitytracker.com/id?1021591 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ37696 - http://secunia.com/advisories/33529 - http://www-01.ibm.com/support/docview.wss?uid=swg21363936 - http://www.vupen.com/english/advisories/2009/0137 - http://www.securityfocus.com/bid/33258 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ37697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47931
CVE ID: CVE-2009-0173 State: PUBLISHED Published: 2009-01-16T21:00:00 Last Updated: 2024-08-07T04:24:17.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the server in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote authenticated users to cause a denial of service (trap) via a crafted data stream. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT - http://securitytracker.com/id?1021591 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?
ware.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ39652 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ39373 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - https://exchange.xforce.ibmcloud.com/vulnerabilities/47934 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ39653 - http://secunia.com/advisories/33529 - http://www-01.ibm.com/support/docview.wss?uid=swg21363936 - http://www.vupen.com/english/advisories/2009/0137 - http://www.securityfocus.com/bid/33258
CVE ID: CVE-2009-0174 State: PUBLISHED Published: 2009-01-20T15:26:00 Last Updated: 2024-08-07T04:24:18.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of a REF element in a .asx file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47851 - http://www.securityfocus.com/bid/33185 - https://www.exploit-db.com/exploits/7715 - http://securityreason.com/securityalert/4918 - https://www.exploit-db.com/exploits/7713 - https://www.exploit-db.com/exploits/7709 - https://www.exploit
tyalert/4918 - https://www.exploit-db.com/exploits/7713 - https://www.exploit-db.com/exploits/7709 - https://www.exploit-db.com/exploits/7714
CVE ID: CVE-2009-0175 State: PUBLISHED Published: 2009-01-20T15:26:00 Last Updated: 2024-08-07T04:24:18.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Heathco Software MP3 TrackMaker 1.5 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string in an invalid .mp3 file. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4920 - http://www.securityfocus.com/bid/33183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47852 - https://www.exploit-db.com/exploits/7708
CVE ID: CVE-2009-0176 State: PUBLISHED Published: 2009-01-20T15:26:00Z Last Updated: 2024-09-17T02:31:04.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 allow user-assisted remote attackers to execute arbitrary code via (1) a crafted stream in a .pdf file, related to "symWidths"; or (2) a crafted data stream in a .pdf file, related to "bitmaps." Additional Analyst Notes: - CVE Program Container: References: - http://www.blackbe
n a .pdf file, related to "bitmaps." Additional Analyst Notes: - CVE Program Container: References: - http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17118 - http://www.securityfocus.com/bid/33224 - http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17119 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=765 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=764 - http://secunia.com/advisories/33534
CVE ID: CVE-2009-0177 State: PUBLISHED Published: 2009-01-20T15:26:00 Last Updated: 2024-08-07T04:24:18.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 2.0.x before 2.0.1 build 156745; and VMware Fusion before 2.0.2 build 147997 allows remote attackers to cause a denial of service (daemon crash) via a long (1) USER or (2) PASS command. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/d
ommand. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6433 - http://seclists.org/fulldisclosure/2009/Apr/0036.html - http://secunia.com/advisories/33372 - http://www.securityfocus.com/bid/34373 - http://www.vupen.com/english/advisories/2009/0024 - http://osvdb.org/51180 - https://www.exploit-db.com/exploits/7647 - http://www.securitytracker.com/id?1021512 - http://www.vupen.com/english/advisories/2009/0944 - http://secunia.com/advisories/34601 - http://lists.vmware.com/pipermail/security-announce/2009/000054.html - http://www.vmware.com/security/advisories/VMSA-2009-0005.html
CVE ID: CVE-2009-0178 State: PUBLISHED Published: 2009-01-20T16:00:00 Last Updated: 2024-08-07T04:24:18.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51432 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48010 - http://www.securityfocus.com/bid/33293 - http://secunia.com/advisories/33518 - http://www-1.ibm.com/support/docview.wss?uid=isg1MB02834 - http://www.vupen.com/english/adviso
ia.com/advisories/33518 - http://www-1.ibm.com/support/docview.wss?uid=isg1MB02834 - http://www.vupen.com/english/advisories/2009/0158
CVE ID: CVE-2009-0179 State: PUBLISHED Published: 2009-01-20T16:00:00 Last Updated: 2024-08-07T04:24:18.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: libmikmod 3.1.11 through 3.2.0, as used by MikMod and possibly other products, allows user-assisted attackers to cause a denial of service (application crash) by loading an XM file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34259 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01305.html - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html - http://www.securityfocus.com/bid/33240 - http://bugs.debian.org/cgi-bin/bugreport.cgi?
-announce/2009-03/msg00001.html - http://www.securityfocus.com/bid/33240 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476339 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01312.html - https://bugzilla.redhat.com/show_bug.cgi?id=479833 - http://openwall.com/lists/oss-security/2009/01/13/2
CVE ID: CVE-2009-0180 State: PUBLISHED Published: 2009-01-20T16:00:00 Last Updated: 2024-08-07T04:24:18.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=477864 - http://www.securityfocus.com/bid/33294 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48058 - https://www.redhat.com/archives/fedora-package-announce
4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48058 - https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html - https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html - http://secunia.com/advisories/33545
CVE ID: CVE-2009-0181 State: PUBLISHED Published: 2009-01-20T16:00:00 Last Updated: 2024-08-07T04:24:18.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in VUPlayer allows user-assisted attackers to have an unknown impact via a long file, as demonstrated by a file composed entirely of 'A' characters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4921 - http://www.securityfocus.com/archive/1/499810/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/48169
CVE ID: CVE-2009-0182 State: PUBLISHED Published: 2009-01-20T16:00:00 Last Updated: 2024-08-07T04:24:18.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7695 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48170 - http://securityreason.com/securityalert/4923 - http://packetstormsecurity.com/files/165489/VUPlayer-2.49-Buffer-Overflow.html
CVE ID: CVE-2009-0183 State: PUBLISHED Published: 2009-02-03T19:00:00 Last Updated: 2024-08-07T04:24:18.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33554 - http://www.securityfocus.com/archive/1/500604/100/0/threaded - https://www.exploit-db.com/exploits/7986 - http://secunia.com/secunia_research/2009-3/ - http://secunia.com/advisories/33524 - http://osvdb.org/5
m/exploits/7986 - http://secunia.com/secunia_research/2009-3/ - http://secunia.com/advisories/33524 - http://osvdb.org/51745 - http://www.vupen.com/english/advisories/2009/0302
CVE ID: CVE-2009-0184 State: PUBLISHED Published: 2009-02-03T19:00:00 Last Updated: 2024-08-07T04:24:18.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent file, (2) a long tracker URL in a torrent file, or (3) a long comment in a torrent file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33555 - http://secunia.com/advisories/33524 - http://www.securityfocus.com/archive/1/500605/100/0/threaded - http://www.vupen.c
http://secunia.com/advisories/33524 - http://www.securityfocus.com/archive/1/500605/100/0/threaded - http://www.vupen.com/english/advisories/2009/0302 - http://secunia.com/secunia_research/2009-5/