Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2839 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:36.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Screen Sharing in Apple Mac OS X 10.5.8 allows remote VNC servers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/59997 - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2840 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:36.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spotlight in Apple Mac OS X 10.5.8 does not properly handle temporary files, which allows local users to overwrite arbitrary files in the context of a different user's privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2841 State: PUBLISHED Published: 2009-11-13T15:00:00 Last Updated: 2024-08-07T06:07:37.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attackers to trigger sub-resource requests to arbitrary web sites via a crafted HTML document, as demonstrated by an HTML e-mail message that uses a media element for X-Confirm-Reading-To functionality, aka rdar problem 7271202. Additional An
e-mail message that uses a media element for X-Confirm-Reading-To functionality, aka rdar problem 7271202. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 - http://www.vupen.com/english/advisories/2010/2722 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044031.html - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2010/1801 - http://www.ubuntu.com/usn/USN-1006-1 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html - http://www.vupen.com/english/advisories/2009/3217 - http://secunia.com/advisories/41856 - http://www.vupen.com/english/advis
://www.vupen.com/english/advisories/2009/3217 - http://secunia.com/advisories/41856 - http://www.vupen.com/english/advisories/2011/0212 - http://support.apple.com/kb/HT3949 - https://bugzilla.redhat.com/show_bug.cgi?id=525791 - http://secunia.com/advisories/40557 - http://www.securitytracker.com/id?1023167 - http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.securityfocus.com/bid/36996 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044023.html - http://trac.webkit.org/changeset/49480 - http://threatpost.com/en_us/blogs/apple-patches-critical-safari-vulnerabil
ml - http://trac.webkit.org/changeset/49480 - http://threatpost.com/en_us/blogs/apple-patches-critical-safari-vulnerabilities-111109 - http://osvdb.org/59941 - http://www.vupen.com/english/advisories/2011/0552 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54242 - http://support.apple.com/kb/HT4013 - http://secunia.com/advisories/37346
CVE ID: CVE-2009-2842 State: PUBLISHED Published: 2009-11-13T15:00:00 Last Updated: 2024-08-07T06:07:37.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari before 4.0.4 does not properly implement certain (1) Open Image and (2) Open Link menu options, which allows remote attackers to read local HTML files via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/59942 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html - http://www.vupen.com/english/advisories/2009/3217 - http://support.apple.com/kb/HT3949 - http://www.securitytracker.com/id?1023164 - http://www.securityfocus.com/bid/36994 - https
support.apple.com/kb/HT3949 - http://www.securitytracker.com/id?1023164 - http://www.securityfocus.com/bid/36994 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54238 - http://secunia.com/advisories/37346
CVE ID: CVE-2009-2843 State: PUBLISHED Published: 2009-12-08T17:00:00Z Last Updated: 2024-09-17T00:11:22.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Java for Mac OS X 10.5 before Update 6 and 10.6 before Update 1 accepts expired certificates for applets, which makes it easier for remote attackers to execute arbitrary code via an applet. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3970 - http://support.apple.com/kb/HT3969 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html - http://www.securityfocus.com/bid/37206 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html - http://secu
www.securityfocus.com/bid/37206 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html - http://secunia.com/advisories/37581
CVE ID: CVE-2009-2844 State: PUBLISHED Published: 2009-08-18T20:41:00 Last Updated: 2024-08-07T06:07:37.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service (crash) via a sequence of beacon frames in which one frame omits an SSID Information Element (IE) and the subsequent frame contains an SSID IE, which triggers a NULL pointer dereference in the cmp_ies function. NOTE: a potential weakness in the is_mesh function was also addressed, but the relevant condition did not exist in the code, so it is not a vulnerability. Additional An
on was also addressed, but the relevant condition did not exist in the code, so it is not a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36278 - http://jon.oberheide.org/files/cfg80211-remote-dos.c - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=cd3468bad96c00b5a512f551674f36776129520e - http://www.openwall.com/lists/oss-security/2009/08/17/2 - http://www.openwall.com/lists/oss-security/2009/08/17/1 - http://www.securityfocus.com/bid/36052 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5
CVE ID: CVE-2009-2845 State: REJECTED Published: 2009-08-18T20:00:00Z Last Updated: 2024-09-17T00:25:47.179Z Description: No description available.
CVE ID: CVE-2009-2846 State: PUBLISHED Published: 2009-08-18T20:41:00 Last Updated: 2024-08-07T06:07:36.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eisa_eeprom_read function in the parisc isa-eeprom component (drivers/parisc/eisa_eeprom.c) in the Linux kernel before 2.6.31-rc6 allows local users to access restricted memory via a negative ppos argument, which bypasses a check that assumes that ppos is positive and causes an out-of-bounds read in the readb function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/08/10/1 - http://www.ubuntu.com/usn/USN-852-1 - http://www.mandriva.com/security/advisories?na
m/lists/oss-security/2009/08/10/1 - http://www.ubuntu.com/usn/USN-852-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52906 - http://www.openwall.com/lists/oss-security/2009/08/18/6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=6b4dbcd86a9d464057fcc7abe4d0574093071fcc - http://secunia.com/advisories/37105
CVE ID: CVE-2009-2847 State: PUBLISHED Published: 2009-08-18T20:41:00 Last Updated: 2024-08-07T06:07:36.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/08/04/1 - https://bugzilla.redhat.com/show_bug.cgi?id=515392 - http://secunia.com/advisories/37471 - http://www.ub
/2009/08/04/1 - https://bugzilla.redhat.com/show_bug.cgi?id=515392 - http://secunia.com/advisories/37471 - http://www.ubuntu.com/usn/USN-852-1 - http://rhn.redhat.com/errata/RHSA-2009-1243.html - http://secunia.com/advisories/36759 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.openwall.com/lists/oss-security/2009/08/26/2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10637 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/36562 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git
ves/fedora-package-announce/2009-August/msg01256.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=0083fc2c50e6c5127c2802ad323adf8143ab7856 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8405 - http://www.exploit-db.com/exploits/9352 - http://secunia.com/advisories/36501 - http://www.openwall.com/lists/oss-security/2009/08/05/1 - http://www.redhat.com/support/errata/RHSA-2009-1438.html - http://www.vupen.com/english/advisories/2009/3316 - http://secunia.com/advisories/37105 - http://secunia.com/advisories/36136
CVE ID: CVE-2009-2848 State: PUBLISHED Published: 2009-08-18T20:41:00 Last Updated: 2024-08-07T06:07:37.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512019/100/0/threaded - http://secunia.com/adv
E Program Container: References: - http://www.securityfocus.com/archive/1/512019/100/0/threaded - http://secunia.com/advisories/37471 - http://www.ubuntu.com/usn/USN-852-1 - http://rhn.redhat.com/errata/RHSA-2009-1243.html - http://secunia.com/advisories/36759 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://secunia.com/advisories/37351 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9766 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A
%3Aorg.mitre.oval%3Adef%3A9766 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11412 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/36562 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/52899 - http://article.gmane.org/gmane.linux.kernel/871942 - http://secunia.com/advisories/35983 - https://rhn.redhat.com/errata/RHSA-2009-1550.html - http://secunia.com/advisories/36501 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8598 - http://www.openwall.com/lists/oss-security/2009/08/
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8598 - http://www.openwall.com/lists/oss-security/2009/08/04/2 - http://www.openwall.com/lists/oss-security/2009/08/05/10 - http://www.redhat.com/support/errata/RHSA-2009-1438.html - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html - http://www.vupen.com/english/advisories/2009/3316 - http://secunia.com/advisories/37105
CVE ID: CVE-2009-2849 State: PUBLISHED Published: 2009-08-18T20:41:00 Last Updated: 2024-08-07T06:07:36.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service (NULL pointer dereference) via vectors related to "suspend_* sysfs attributes" and the (1) suspend_lo_store or (2) suspend_hi_store functions. NOTE: this is only a vulnerability when sysfs is writable by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2009-1540.html - http://www.securitytracker.com/id?1022961 - http://www.ubuntu.com/usn/USN-852
hn.redhat.com/errata/RHSA-2009-1540.html - http://www.securitytracker.com/id?1022961 - http://www.ubuntu.com/usn/USN-852-1 - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10396 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html - http://www.openwall.com/lists/oss-security/2009/07/26/1 - http://secunia.com/advisories/38834 - http://xorl.wordpress.com/2009/07/21/linux-kernel-md-driver-null-pointer-dereference/ - https://exchange.xforce.ibmcloud.com/v
/xorl.wordpress.com/2009/07/21/linux-kernel-md-driver-null-pointer-dereference/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/52858 - http://www.openwall.com/lists/oss-security/2009/07/24/1 - http://secunia.com/advisories/36501 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.30.y.git%3Ba=commit%3Bh=3c92900d9a4afb176d3de335dc0da0198660a244 - http://secunia.com/advisories/37105 - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2009-2850 State: PUBLISHED Published: 2009-08-18T20:41:00Z Last Updated: 2024-09-16T22:02:35.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in NASA Common Data Format (CDF) allow context-dependent attackers to execute arbitrary code, as demonstrated using (1) an array index error in the ReadAEDRList64 function, and other errors in the (2) SearchForRecord_r_64, (3) LastRecord64, (4) CDFsel64, and other unspecified functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/505123/30/0/threaded - http://cdf.gsfc.nasa.gov/html/CDF_changesnote2.html - http://cdf.gsfc.nasa.gov/html/CDF_v3
hive/1/505123/30/0/threaded - http://cdf.gsfc.nasa.gov/html/CDF_changesnote2.html - http://cdf.gsfc.nasa.gov/html/CDF_v330.html - http://www.openwall.com/lists/oss-security/2009/08/14/3
CVE ID: CVE-2009-2851 State: PUBLISHED Published: 2009-08-18T20:41:00 Last Updated: 2024-08-07T06:07:36.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via a comment author URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/07/21/1 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01253.html - http://www.debian.org/security/2009/dsa-1871 - http://wordpress.org/development/2009/07/wordpress-2-8-2/ - https://www.redhat.com/archives/f
g/security/2009/dsa-1871 - http://wordpress.org/development/2009/07/wordpress-2-8-2/ - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01241.html - http://securitytracker.com/id?1022589 - http://bugs.gentoo.org/show_bug.cgi?id=278492 - https://bugzilla.redhat.com/show_bug.cgi?id=512900
CVE ID: CVE-2009-2852 State: PUBLISHED Published: 2009-08-18T20:41:00 Last Updated: 2024-08-07T06:07:37.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: WP-Syntax plugin 0.9.1 and earlier for Wordpress, with register_globals enabled, allows remote attackers to execute arbitrary PHP code via the test_filter[wp_head] array parameter to test/index.php, which is used in a call to the call_user_func_array function. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9431 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52457 - http://www.vupen.com/english/advisories/2009/2456 - http://www.securityfocus.com/bid/36040
CVE ID: CVE-2009-2853 State: PUBLISHED Published: 2009-08-18T20:41:00 Last Updated: 2024-08-07T06:07:37.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1) admin-footer.php, (2) edit-category-form.php, (3) edit-form-advanced.php, (4) edit-form-comment.php, (5) edit-link-category-form.php, (6) edit-link-form.php, (7) edit-page-form.php, and (8) edit-tag-form.php in wp-admin/. Additional Analyst Notes: - CVE Program Container: References: - http://core.trac.wordpress.org/changeset/11768 - http://www.openwall.com/lists/oss-security/2009/08/04/5 - http://www.debian.org/security/2009/dsa-1871
changeset/11768 - http://www.openwall.com/lists/oss-security/2009/08/04/5 - http://www.debian.org/security/2009/dsa-1871 - http://core.trac.wordpress.org/changeset/11769 - http://wordpress.org/development/2009/08/wordpress-2-8-3-security-release/
CVE ID: CVE-2009-2854 State: PUBLISHED Published: 2009-08-18T20:41:00 Last Updated: 2024-08-07T06:07:37.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wordpress before 2.8.3 does not check capabilities for certain actions, which allows remote attackers to make unauthorized edits or additions via a direct request to (1) edit-comments.php, (2) edit-pages.php, (3) edit.php, (4) edit-category-form.php, (5) edit-link-category-form.php, (6) edit-tag-form.php, (7) export.php, (8) import.php, or (9) link-add.php in wp-admin/. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/08/04/5 - http://core.trac.wordpress.org/chang
Container: References: - http://www.openwall.com/lists/oss-security/2009/08/04/5 - http://core.trac.wordpress.org/changeset/11765 - http://www.debian.org/security/2009/dsa-1871 - http://core.trac.wordpress.org/changeset/11766 - http://wordpress.org/development/2009/08/wordpress-2-8-3-security-release/
CVE ID: CVE-2009-2855 State: PUBLISHED Published: 2009-08-18T20:41:00 Last Updated: 2024-08-07T06:07:36.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/08/03/3 - http://www.securityfocus.com/bid/36091 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534982 - http://www.openwall.com/lists/oss-security/2009/08/04/6 - http://www.sq
gs.debian.org/cgi-bin/bugreport.cgi?bug=534982 - http://www.openwall.com/lists/oss-security/2009/08/04/6 - http://www.squid-cache.org/bugs/show_bug.cgi?id=2704 - http://www.squid-cache.org/bugs/show_bug.cgi?id=2541 - http://www.securitytracker.com/id?1022757 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10592 - https://bugzilla.redhat.com/show_bug.cgi?id=518182 - http://www.openwall.com/lists/oss-security/2009/07/20/10 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52610 - http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=31%3Bfilename=diff%3Batt=1%3Bbug=534982
CVE ID: CVE-2009-2856 State: PUBLISHED Published: 2009-08-18T22:00:00Z Last Updated: 2024-09-16T22:51:15.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Virtual Desktop Infrastructure (VDI) 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2282 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-265488-1 - http://secunia.com/advisories/36330 -
s/2009/2282 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-265488-1 - http://secunia.com/advisories/36330 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-02-1
CVE ID: CVE-2009-2857 State: PUBLISHED Published: 2009-08-19T17:00:00 Last Updated: 2025-01-21T16:04:44.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service (deadlock and system halt) via vectors involving mmap and write operations on the same file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.vupen.com/english/advisories/2009/2291 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-127721-02-1 - http
www.vupen.com/english/advisories/2009/2291 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-127721-02-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-257848-1 - http://secunia.com/advisories/36319 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6152
CVE ID: CVE-2009-2858 State: PUBLISHED Published: 2009-08-19T17:00:00Z Last Updated: 2024-09-16T17:22:46.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows attackers to cause a denial of service (memory consumption) via unspecified vectors, related to private memory within the DB2 memory structure. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg24024075 - http://secunia.com/advisories/36313 - http://www-01.ibm.com/support/docview.wss?
m/support/docview.wss?uid=swg24024075 - http://secunia.com/advisories/36313 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ35635
CVE ID: CVE-2009-2859 State: PUBLISHED Published: 2009-08-19T17:00:00Z Last Updated: 2024-09-16T20:41:36.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 8.1 before FP18 allows attackers to obtain unspecified access via a das command. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ34149 - http://www-01.ibm.com/support/docview.wss?uid=swg24024075 - http://secunia.com/advisories/36313 - http://www.vupen.com/english/advisories/2009/2293
CVE ID: CVE-2009-2860 State: PUBLISHED Published: 2009-08-19T17:00:00Z Last Updated: 2024-09-16T20:31:16.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in db2jds in IBM DB2 8.1 before FP18 allows remote attackers to cause a denial of service (service crash) via "malicious packets." Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ52433 - http://www-01.ibm.com/support/docview.wss?uid=swg24024075 - http://secunia.com/advisories/36313 - http://www.vupen.com/english/advisories/2009/2293