Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3273 State: PUBLISHED Published: 2009-09-21T19:00:00 Last Updated: 2024-08-07T06:22:23.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-mail servers via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53234 - http://www.securityfocus.com/bid/36370 - http://www.securityfocus.com/archive/1/506428/100/0/threaded
CVE ID: CVE-2009-3274 State: PUBLISHED Published: 2009-09-21T19:00:00 Last Updated: 2024-08-07T06:22:24.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/sup
from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0153.html - http://securitytube.net/Zero-Day-Demos-%28Firefox-Vulnerability-Discovered%29-video.aspx - http://www.vupen.com/english/advisories/2010/0650 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=514823 - http://www.redhat.com/support/errata/RHSA-2010-0154.html - http://jbrownsec.blogspot.com/2009/09/vamos-updates.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9641 - http://secunia.com/advisories/36649 - http://www.mozilla.org/security
ch/definition/oval%3Aorg.mitre.oval%3Adef%3A9641 - http://secunia.com/advisories/36649 - http://www.mozilla.org/security/announce/2009/mfsa2009-53.html - http://www.vupen.com/english/advisories/2009/3334 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:294
CVE ID: CVE-2009-3275 State: PUBLISHED Published: 2009-09-21T19:00:00 Last Updated: 2024-08-07T06:22:24.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blocks/Common/Src/Configuration/Manageability/Adm/AdmContentBuilder.cs in Microsoft patterns & practices Enterprise Library (aka EntLib) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many \ (backslash) characters followed by a " (double quote), related to a certain regular expression, aka a "ReDoS" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf - ht
VE Program Container: References: - http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf - http://www.securityfocus.com/archive/1/506419/100/0/threaded
CVE ID: CVE-2009-3276 State: PUBLISHED Published: 2009-09-21T19:00:00 Last Updated: 2024-08-07T06:22:24.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed in NASD CORE.NET Terelik (aka corenet1) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many alphabetic characters followed by a ! (exclamation point), related to a certain regular expression, aka a "ReDoS" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf - http://www.securityfocus.co
erences: - http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf - http://www.securityfocus.com/archive/1/506419/100/0/threaded
CVE ID: CVE-2009-3277 State: PUBLISHED Published: 2009-09-21T19:00:00 Last Updated: 2024-08-07T06:22:24.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: DataVault.Tesla/Impl/TypeSystem/AssociationHelper.cs in datavault allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of an [ (open bracket) followed by many commas, related to a certain regular expression, aka a "ReDoS" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf - http://www.securityfocus.com/archive/1/506419/100/0/threaded
CVE ID: CVE-2009-3278 State: PUBLISHED Published: 2009-09-21T19:00:00 Last Updated: 2024-08-07T06:22:24.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 use the rand library function to generate a certain recovery key, which makes it easier for local users to determine this key via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt - http://secunia.com/advisories/36793 - http://www.securityfocus.com/archive/1/506607/100/0/threaded - http://www.securityfocus.com/bid/36467
CVE ID: CVE-2009-3279 State: PUBLISHED Published: 2009-09-21T19:00:00 Last Updated: 2024-08-07T06:22:24.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create a LUKS partition by using the AES-256 cipher in plain CBC mode, which allows local users to obtain sensitive information via a watermark attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt - http://secunia.com/advisories/36793 - http://www.securityfocus.com/archive/1/506607/100/0/threaded
CVE ID: CVE-2009-3280 State: PUBLISHED Published: 2009-09-21T19:00:00Z Last Updated: 2024-09-16T17:17:38.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the find_ie function in net/wireless/scan.c in the cfg80211 subsystem in the Linux kernel before 2.6.31.1-rc1 allows remote attackers to cause a denial of service (soft lockup) via malformed packets. Additional Analyst Notes: - CVE Program Container: References: - http://patchwork.kernel.org/patch/45106/ - http://www.openwall.com/lists/oss-security/2009/09/16/2 - http://www.kernel.org/pub/linux/kernel/v2.6/stable-review/patch-2.6.31.1-rc1.bz2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/lin
.org/pub/linux/kernel/v2.6/stable-review/patch-2.6.31.1-rc1.bz2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fcc6cb0c13555e78c2d47257b6d1b5e59b0c419a - http://www.securityfocus.com/bid/36421
CVE ID: CVE-2009-3281 State: PUBLISHED Published: 2009-10-16T16:00:00Z Last Updated: 2024-09-17T00:31:56.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.vmware.com/pipermail/security-announce/2009/000066.html - http://www.vupen.com/english/advisories/2009/2811 - http://www.vmware.com/security/advisories/VMSA-2009-0013.html - http://secunia.com/advisories/36928 - http://securitytracker.com/id?1022981
CVE ID: CVE-2009-3282 State: PUBLISHED Published: 2009-10-16T16:00:00Z Last Updated: 2024-09-16T22:15:47.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.vmware.com/pipermail/security-announce/2009/000066.html - http://www.vupen.com/english/advisories/2009/2811 - http://www.vmware.com/security/advisories/VMSA-2009-0013.html - http://secunia.com/advisories/36928 - http://securitytracker.com/id?1022981
CVE ID: CVE-2009-3283 State: PUBLISHED Published: 2009-09-22T10:00:00Z Last Updated: 2024-09-16T16:38:42.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, and webshot, dated before 20090914, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to cookies. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000063.html - http://phpspot.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html - http://secunia.com/advisories/367
t.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html - http://secunia.com/advisories/36783 - http://jvn.jp/en/jp/JVN53591199/index.html
CVE ID: CVE-2009-3284 State: PUBLISHED Published: 2009-09-22T10:00:00Z Last Updated: 2024-09-16T16:33:31.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, and webshot, dated before 20090914, allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN65914253/index.html - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000064.html - http://phpspot.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html - http://secunia.com/advisories
pspot.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html - http://secunia.com/advisories/36783
CVE ID: CVE-2009-3286 State: PUBLISHED Published: 2009-09-22T10:00:00 Last Updated: 2024-08-07T06:22:24.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an O_EXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the do_open_permission function even when a create fails. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-852-1 - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-annou
://www.ubuntu.com/usn/USN-852-1 - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9757 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7527 - https://rhn.redhat.com/errata/RHSA-2009-1548.html - http://secunia.com/advisories/38834 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=81ac95c5 - http://www.openwall.com/lists/oss-security/2009/09/21/2 - https://bugzilla.redhat.com/show_bug.cgi?id=52452
h=81ac95c5 - http://www.openwall.com/lists/oss-security/2009/09/21/2 - https://bugzilla.redhat.com/show_bug.cgi?id=524520 - http://secunia.com/advisories/37105 - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2009-3287 State: PUBLISHED Published: 2009-09-22T10:00:00Z Last Updated: 2024-09-16T23:56:47.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header. Additional Analyst Notes: - CVE Program Container: References: - http://github.com/macournoyer/thin/blob/master/CHANGELOG - http://github.com/macournoyer/thin/commit/7bd027914c5ffd36bb408ef47dc749de3b6e063a - http://www.openwall.com/lists/oss-security/2009/09/12/1
CVE ID: CVE-2009-3288 State: PUBLISHED Published: 2009-09-22T10:00:00 Last Updated: 2024-08-07T06:22:24.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of service (kernel OOPS and NULL pointer dereference), as demonstrated by using xcdroast to duplicate a CD. NOTE: this is only exploitable by users who can open the cdrom device. Additional Analyst Notes: - CVE Program Container: References: - http://lkml.org/lkml/2009/9/3/107 - http://www.openwall.com/lists/oss-security/2009/09/03/4 - h
Container: References: - http://lkml.org/lkml/2009/9/3/107 - http://www.openwall.com/lists/oss-security/2009/09/03/4 - http://www.ubuntu.com/usn/USN-852-1 - http://lkml.org/lkml/2009/9/3/1 - http://secunia.com/advisories/37105
CVE ID: CVE-2009-3289 State: PUBLISHED Published: 2009-09-22T10:00:00 Last Updated: 2024-08-07T06:22:24.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: The g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link (777), which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/glib2.0/+bug/418135 - http://secunia.com/advisories/39656 - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html - https://b
://secunia.com/advisories/39656 - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html - https://bugzilla.gnome.org/show_bug.cgi?id=593406 - http://www.openwall.com/lists/oss-security/2009/09/08/8 - http://www.vupen.com/english/advisories/2010/1001
CVE ID: CVE-2009-3290 State: PUBLISHED Published: 2009-09-22T10:00:00 Last Updated: 2024-08-07T06:22:24.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service (guest kernel crash) and read or write guest kernel memory via unspecified "random addresses." Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=524124 - http://www.ubuntu.com/usn/USN-852-1 - http
Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=524124 - http://www.ubuntu.com/usn/USN-852-1 - http://www.openwall.com/lists/oss-security/2009/09/18/1 - http://patchwork.kernel.org/patch/38926/ - http://www.redhat.com/support/errata/RHSA-2009-1465.html - http://www.openwall.com/lists/oss-security/2009/09/22/8 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11328 - http://www.openwall.com/lists/oss-security/2009/09/21/1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=07708c4af1346ab1521b26a202f438366b7bcffd - http://secunia.com/advisories/37105
CVE ID: CVE-2009-3291 State: PUBLISHED Published: 2009-09-22T10:00:00 Last Updated: 2024-08-07T06:22:24.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validation, which has unknown impact and attack vectors, probably related to an ability to spoof certificates. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-5.php#5.2.11 - http://secunia.com/advisories/37482 - http://secunia.com/advisories/40262 - http://marc.info/?l=bugtraq&m=127680701405735&w=2 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://www.php.net/rel
/marc.info/?l=bugtraq&m=127680701405735&w=2 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://www.php.net/releases/5_2_11.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/53334 - http://www.securitytracker.com/id?1022914 - http://secunia.com/advisories/36791 - http://www.debian.org/security/2009/dsa-1940 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10438 - http://www.vupen.com/english/advisories/2009/3184 - http://www.osvdb.org/58185 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7394 - http://marc.info/?l=bugtraq&m=127680701405735&w=2
.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7394 - http://marc.info/?l=bugtraq&m=127680701405735&w=2 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-3292 State: PUBLISHED Published: 2009-09-22T10:00:00 Last Updated: 2024-08-07T06:22:24.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity checks around exif processing." Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-5.php#5.2.11 - http://www.openwall.com/lists/oss-security/2009/11/20/3 - http://secunia.com/advisories/37482 - http://secunia.com/advisories/40262 - http://news.php.net/php.announce/79 - http://marc.info/?l=bugtraq&m=127680701405735&w=2 - http://marc.info/?l=bugtraq&m=
http://news.php.net/php.announce/79 - http://marc.info/?l=bugtraq&m=127680701405735&w=2 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://www.php.net/releases/5_2_11.php - http://www.securitytracker.com/id?1022914 - http://www.osvdb.org/58186 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9982 - http://secunia.com/advisories/36791 - http://www.debian.org/security/2009/dsa-1940 - http://www.php.net/ChangeLog-5.php - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://www.openwall.com/lists/oss-security/2009/11/20/2 - http://www.php.net/releases/5_3_1.php - http://secunia.com/advisories/37412 - http://www.mandriva.com/security/advisor
- http://www.php.net/releases/5_3_1.php - http://secunia.com/advisories/37412 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:302 - http://www.vupen.com/english/advisories/2009/3184 - http://marc.info/?l=bugtraq&m=127680701405735&w=2 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html - http://support.apple.com/kb/HT3937 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7652
CVE ID: CVE-2009-3293 State: PUBLISHED Published: 2009-09-22T10:00:00 Last Updated: 2024-08-07T06:22:24.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the imagecolortransparent function in PHP before 5.2.11 has unknown impact and attack vectors related to an incorrect "sanity check for the color index." Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-5.php#5.2.11 - http://secunia.com/advisories/40262 - http://marc.info/?l=bugtraq&m=127680701405735&w=2 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://www.php.net/releases/5_2_11.php - http://www.securitytracker.com/id?1022914 - http://secuni
130497311408250&w=2 - http://www.php.net/releases/5_2_11.php - http://www.securitytracker.com/id?1022914 - http://secunia.com/advisories/36791 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7047 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://www.osvdb.org/58187 - http://www.vupen.com/english/advisories/2009/3184 - http://marc.info/?l=bugtraq&m=127680701405735&w=2 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-3294 State: PUBLISHED Published: 2009-09-22T10:00:00 Last Updated: 2024-08-07T06:22:24.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: The popen API function in TSRM/tsrm_win32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, allows context-dependent attackers to cause a denial of service (crash) via a crafted (1) "e" or (2) "er" string in the second argument (aka mode), possibly related to the _fdopen function in the Microsoft C runtime library. NOTE: this might not cross privilege boundaries except in rare cases in which the mode argument is accessible to an attacker outside of an application that uses the po
except in rare cases in which the mode argument is accessible to an attacker outside of an application that uses the popen function. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-5.php#5.2.11 - http://www.openwall.com/lists/oss-security/2009/11/20/3 - http://news.php.net/php.announce/79 - http://www.php.net/releases/5_2_11.php - http://www.php.net/ChangeLog-5.php - http://www.openwall.com/lists/oss-security/2009/11/20/2 - http://bugs.php.net/bug.php?id=44683 - http://www.php.net/releases/5_3_1.php - http://www.openwall.com/lists/oss-security/2009/09/20/1 - http://www.osvdb.org/58188 - http://svn.php.net/viewvc?view=revision&revision=287779
CVE ID: CVE-2009-3295 State: PUBLISHED Published: 2009-12-29T16:00:00 Last Updated: 2024-08-07T06:22:24.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a ticket request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37977 - http://www.vupen.com/english/advisories/2009/3652 - http://securitytracker.com/id?1023392 - http://www.securityfocus.com/bid/37486 -
upen.com/english/advisories/2009/3652 - http://securitytracker.com/id?1023392 - http://www.securityfocus.com/bid/37486 - http://www.securityfocus.com/archive/1/508622/100/0/threaded - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-003.txt
CVE ID: CVE-2009-3296 State: PUBLISHED Published: 2009-10-20T17:00:00Z Last Updated: 2024-09-17T01:16:21.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in tiffread.c in CamlImages 2.2 might allow remote attackers to execute arbitrary code via TIFF images containing large width and height values that trigger heap-based buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.2.0-4+lenny3.diff.gz - http://www.debian.org/security/2009/dsa-1912 - http://secunia.com/advisories/37067 - http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.20-
-1912 - http://secunia.com/advisories/37067 - http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.20-8+etch3.diff.gz - http://www.securityfocus.com/bid/36713
CVE ID: CVE-2009-3297 State: REJECTED Published: 2010-03-02T18:00:00Z Last Updated: 2024-09-16T19:14:19.755Z Description: No description available.