Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4862 State: PUBLISHED Published: 2010-05-10T20:00:00 Last Updated: 2024-08-07T07:17:25.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Alwasel 1.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) show.php and (2) xml.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52326 - http://www.exploit-db.com/exploits/9384
CVE ID: CVE-2009-4863 State: PUBLISHED Published: 2010-05-10T20:00:00 Last Updated: 2024-08-07T07:17:26.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in UltraPlayer Media Player 2.112 allows remote attackers to execute arbitrary code via a long string in a .usk file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7438 - http://www.securityfocus.com/bid/35956 - http://www.vupen.com/english/advisories/2009/2160 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52281 - http://www.exploit-db.com/exploits/9368
CVE ID: CVE-2009-4864 State: PUBLISHED Published: 2010-05-10T20:00:00 Last Updated: 2024-08-07T07:17:25.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in escorts_search.php in I-Escorts Directory Script and Agency Script allow remote attackers to inject arbitrary web script or HTML via the (1) search_name and (2) languages parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52303 - http://packetstormsecurity.org/0908-exploits/des-xss.txt
CVE ID: CVE-2009-4865 State: PUBLISHED Published: 2010-05-10T20:00:00 Last Updated: 2024-08-07T07:17:26.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in escorts_search.php in I-Escorts Directory Script and Agency Script, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) search_name and (2) languages parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52304 - http://osvdb.org/56858 - http://secunia.com/advisories/36161 - http://packetsto
rce.ibmcloud.com/vulnerabilities/52304 - http://osvdb.org/56858 - http://secunia.com/advisories/36161 - http://packetstormsecurity.org/0908-exploits/des-xss.txt
CVE ID: CVE-2009-4866 State: PUBLISHED Published: 2010-05-10T20:00:00 Last Updated: 2024-08-07T07:17:25.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.cgi in Matt's Script Archive (MSA) Simple Search 1.0 allows remote attackers to inject arbitrary web script or HTML via the terms parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0908-exploits/simplesearch-xss.txt - http://secunia.com/advisories/36178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52311 - http://osvdb.org/56798
CVE ID: CVE-2009-4867 State: PUBLISHED Published: 2010-05-10T20:00:00 Last Updated: 2024-08-07T07:17:26.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Tuniac 090517c allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long URL in a .m3u playlist file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52280 - http://www.vupen.com/english/advisories/2009/2159 - http://www.exploit-db.com/exploits/9364
CVE ID: CVE-2009-4868 State: PUBLISHED Published: 2010-05-10T20:00:00Z Last Updated: 2024-09-17T03:39:01.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Hitron Soft Answer Me 1.0 allows remote attackers to inject arbitrary web script or HTML via the q_id parameter to the answers script (aka answers.php). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36247 - http://packetstormsecurity.org/0908-exploits/hitronsam-xss.txt
CVE ID: CVE-2009-4869 State: PUBLISHED Published: 2010-05-10T20:00:00Z Last Updated: 2024-09-16T18:48:25.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36246 - http://packetstormsecurity.org/0908-exploits/nasimgb-xss.txt
CVE ID: CVE-2009-4870 State: PUBLISHED Published: 2010-05-10T20:00:00 Last Updated: 2024-08-07T07:17:26.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.php in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the (1) req_username (aka Username) and (2) req_password (aka Password) parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9395 - http://secunia.com/advisories/36210
CVE ID: CVE-2009-4871 State: PUBLISHED Published: 2010-05-10T20:00:00 Last Updated: 2024-08-07T07:17:26.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in globepersonnel_forum.asp in Logoshows BBS 2.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9389 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52330
CVE ID: CVE-2009-4872 State: PUBLISHED Published: 2010-05-10T20:00:00 Last Updated: 2024-08-07T07:17:26.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in globepersonnel_login.asp in Logoshows BBS 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9399
CVE ID: CVE-2009-4873 State: PUBLISHED Published: 2010-05-26T18:00:00Z Last Updated: 2024-09-16T19:47:31.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of service (server crash) or execute arbitrary code via a long Session cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.rangos.de/ServU-ADV.txt - http://www.vupen.com/english/advisories/2009/3116 - http://www.securityfocus.com/bid/36895 - http://secunia.com/advisories/37228
CVE ID: CVE-2009-4874 State: PUBLISHED Published: 2010-05-26T18:00:00 Last Updated: 2024-08-07T07:17:25.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: TalkBack 2.3.14 does not properly restrict access to the edit comment feature (comments.php), which allows remote attackers to modify comments. Additional Analyst Notes: - CVE Program Container: References: - http://www.juniper.net/security/auto/vulnerabilities/vuln35619.html - http://www.securityfocus.com/bid/35619 - http://www.packetstormsecurity.org/0907-exploits/talkback-lfiexec.txt - http://secunia.com/advisories/35735 - http://osvdb.org/55745 - http://www.exploit-db.com/exploits/9095
CVE ID: CVE-2009-4875 State: PUBLISHED Published: 2010-05-26T18:00:00 Last Updated: 2024-08-07T07:17:26.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: FCKeditor.Java 2.4 allows remote attackers to cause a denial of service (infinite loop) via a malformed request parameter that contains "ctrl" characters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35870 - http://www.securityfocus.com/bid/35709 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51738 - http://dev.fckeditor.net/ticket/3902 - http://sourceforge.net/project/shownotes.php?release_id=697258 - http://java.fckeditor.net/changes-report.html#a2.4.2 - http://www.os
forge.net/project/shownotes.php?release_id=697258 - http://java.fckeditor.net/changes-report.html#a2.4.2 - http://www.osvdb.org/56060
CVE ID: CVE-2009-4876 State: PUBLISHED Published: 2010-05-26T18:00:00 Last Updated: 2024-08-07T07:17:26.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/56008 - http://www.exploit-db.com/exploits/9203 - http://secunia.com/advisories/35891 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51846
CVE ID: CVE-2009-4877 State: PUBLISHED Published: 2010-05-26T18:00:00 Last Updated: 2024-08-07T07:17:26.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in WebGUI before 7.7.14 allow remote attackers to hijack the authentication of users for unspecified requests via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55798 - http://secunia.com/advisories/35775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51668 - http://sourceforge.net/project/shownotes.php?release_id=695900
CVE ID: CVE-2009-4878 State: PUBLISHED Published: 2010-05-26T18:00:00 Last Updated: 2024-08-07T07:17:25.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1 allows attackers to access system files via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51822 - http://www.vupen.com/english/advisories/2009/1945 - http://www.securitytracker.com/id?1022581 - http://www.securityfocus.com/bid/35734 - http://secunia.com/advisories/35898 - http://www.novell.com/documentation/novellaccessmanager31/accessman
om/bid/35734 - http://secunia.com/advisories/35898 - http://www.novell.com/documentation/novellaccessmanager31/accessmanager_readme/data/accessmanager_readme.html
CVE ID: CVE-2009-4879 State: PUBLISHED Published: 2010-05-26T18:00:00Z Last Updated: 2024-09-16T16:18:39.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022581 - http://www.novell.com/documentation/novellaccessmanager31/accessmanager_readme/data/accessmanager_readme.html
CVE ID: CVE-2009-4880 State: PUBLISHED Published: 2010-06-01T20:00:00 Last Updated: 2024-08-07T07:17:26.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier allow context-dependent attackers to cause a denial of service (memory consumption or application crash) via a crafted format string, as demonstrated by a crafted first argument to the money_format function in PHP, a related issue to CVE-2008-1391. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:111 - http://security.gentoo.org/glsa/gl
iner: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:111 - http://security.gentoo.org/glsa/glsa-201011-01.xml - http://www.vupen.com/english/advisories/2010/1246 - http://www.ubuntu.com/usn/USN-944-1 - http://www.securityfocus.com/bid/36443 - http://sources.redhat.com/bugzilla/show_bug.cgi?id=10600 - http://securityreason.com/achievement_securityalert/67 - http://secunia.com/advisories/39900 - http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=199eb0de8d673fb23aa127721054b4f1803d61f3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59242 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:112 - http://www.debian.org/security/2010/dsa-2058 - https
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:112 - http://www.debian.org/security/2010/dsa-2058 - https://bugzilla.redhat.com/show_bug.cgi?id=524671
CVE ID: CVE-2009-4881 State: PUBLISHED Published: 2010-06-01T20:00:00 Last Updated: 2024-08-07T07:17:26.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the __vstrfmon_l function in stdlib/strfmon_l.c in the strfmon implementation in the GNU C Library (aka glibc or libc6) before 2.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted format string, as demonstrated by the %99999999999999999999n string, a related issue to CVE-2008-1391. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:111 - http://security.gentoo.org/glsa/glsa-201011-01
nces: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:111 - http://security.gentoo.org/glsa/glsa-201011-01.xml - http://sources.redhat.com/bugzilla/show_bug.cgi?id=10600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59241 - http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=153aa31b93be22e01b236375fb02a9f9b9a0195f - http://www.debian.org/security/2010/dsa-2058
CVE ID: CVE-2009-4882 State: PUBLISHED Published: 2010-06-02T19:00:00 Last Updated: 2024-08-07T07:17:26.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in zc/publisher/html.rb in ZoneCheck 2.0.4-13 and 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the ns parameter to zc.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39940 - http://www.vupen.com/english/advisories/2010/1354 - http://www.debian.org/security/2010/dsa-2056 - http://cvs.savannah.gnu.org/viewvc/zonecheck/zc/publisher/html.rb?root=zonecheck&view=log#rev1.80 - http://cvs.savannah.gnu.org/viewvc/zon
h.gnu.org/viewvc/zonecheck/zc/publisher/html.rb?root=zonecheck&view=log#rev1.80 - http://cvs.savannah.gnu.org/viewvc/zonecheck/zc/publisher/html.rb?root=zonecheck&r1=1.79&r2=1.80 - http://www.xssed.com/mirror/61096/ - http://secunia.com/advisories/40083 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583290 - https://savannah.nongnu.org/bugs/?29967 - http://www.vupen.com/english/advisories/2010/1351
CVE ID: CVE-2009-4883 State: PUBLISHED Published: 2010-06-11T14:00:00 Last Updated: 2024-08-07T07:17:26.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PHPRecipeBook 2.24 and 2.39 allows remote attackers to execute arbitrary SQL commands via the (1) base_id or (2) course_id parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34052 - http://secunia.com/advisories/34221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49145 - http://www.exploit-db.com/exploits/8182
CVE ID: CVE-2009-4884 State: PUBLISHED Published: 2010-06-11T14:00:00 Last Updated: 2024-08-07T07:17:25.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpCommunity 2 2.1.8, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the forum_id parameter in a forum action to index.php, (2) the topic_id parameter in a forum action to index.php, (3) the wert parameter in an id search action to index.php, (4) the wert parameter in a nick search action to index.php, or (5) the wert parameter in a forum search action to index.php, related to class_forum.php and class_search.php. Additional Analyst
rt parameter in a forum search action to index.php, related to class_forum.php and class_search.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49151 - http://www.securityfocus.com/archive/1/501588/100/0/threaded - http://www.exploit-db.com/exploits/8185
CVE ID: CVE-2009-4885 State: PUBLISHED Published: 2010-06-11T14:00:00 Last Updated: 2024-08-07T07:17:26.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in templates/1/login.php in phpCommunity 2 2.1.8 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49153 - http://www.securityfocus.com/archive/1/501588/100/0/threaded - http://www.exploit-db.com/exploits/8185
CVE ID: CVE-2009-4886 State: PUBLISHED Published: 2010-06-11T14:00:00 Last Updated: 2024-08-07T07:17:26.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in phpCommunity 2 2.1.8 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter to module/admin/files/show_file.php and the (2) path parameter to module/admin/files/show_source.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49152 - http://www.securityfocus.com/archive/1/501588/100/0/threaded - http://www.exploit-db.com/exploits/8185
CVE ID: CVE-2009-4887 State: PUBLISHED Published: 2010-06-11T14:00:00 Last Updated: 2024-08-07T07:17:26.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in CMS S.Builder 3.7 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in a binn_include_path cookie. NOTE: this can also be leveraged to include and execute arbitrary local files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49139 - http://www.exploit-db.com/exploits/8172
CVE ID: CVE-2009-4888 State: PUBLISHED Published: 2010-06-11T14:00:00 Last Updated: 2024-08-07T07:17:25.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in poster.php in PHortail 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email, (3) ti, and (4) txt parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34203 - http://www.securityfocus.com/bid/34038 - http://www.vupen.com/english/advisories/2009/0631 - http://osvdb.org/52502 - http://packetstormsecurity.org/0903-exploits/phortail-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabili
52502 - http://packetstormsecurity.org/0903-exploits/phortail-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/49143
CVE ID: CVE-2009-4889 State: PUBLISHED Published: 2010-06-11T14:00:00 Last Updated: 2024-08-07T07:17:26.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in books.php in the Book Panel (book_panel) module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the bookid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49160 - http://www.securityfocus.com/bid/34049
CVE ID: CVE-2009-4890 State: PUBLISHED Published: 2010-06-11T14:00:00 Last Updated: 2024-08-07T07:17:25.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the login application in vBook 4.2.17 allow remote attackers to inject arbitrary web script or HTML via the (1) title and (2) message parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49161 - http://www.securityfocus.com/archive/1/501603/100/0/threaded - http://www.securityfocus.com/bid/34046
CVE ID: CVE-2009-4891 State: PUBLISHED Published: 2010-06-11T14:00:00 Last Updated: 2024-08-07T07:17:26.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CS-Cart 2.0.0 Beta 3 allows remote attackers to execute arbitrary SQL commands via the product_id parameter in a products.view action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49154 - http://www.exploit-db.com/exploits/8184 - http://www.securityfocus.com/bid/34048
CVE ID: CVE-2009-4892 State: PUBLISHED Published: 2010-06-11T14:00:00 Last Updated: 2024-08-07T07:17:25.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Content Management System WEBjump! allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) portfolio_genre.php and (2) news_id.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34058 - http://www.exploit-db.com/exploits/8188
CVE ID: CVE-2009-4893 State: PUBLISHED Published: 2010-06-15T01:00:00 Last Updated: 2024-08-07T07:17:25.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in UnrealIRCd 3.2beta11 through 3.2.8, when allow::options::noident is enabled, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201006-21.xml - http://www.openwall.com/lists/oss-security/2010/06/14/13 - http://www.securityfocus.com/bid/42077 - http://www.unrealircd.com/txt/unrealsecadvisory.20090413.txt
CVE ID: CVE-2009-4894 State: PUBLISHED Published: 2010-06-15T01:00:00Z Last Updated: 2024-09-16T19:25:06.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in profile.php in PunBB before 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) password or (2) e-mail. Additional Analyst Notes: - CVE Program Container: References: - http://punbb.informer.com/forums/topic/21669/punbb-134/
CVE ID: CVE-2009-4895 State: PUBLISHED Published: 2010-09-08T19:00:00 Last Updated: 2024-08-07T07:17:26.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the tty_fasync function in drivers/char/tty_io.c in the Linux kernel before 2.6.32.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via unknown vectors, related to the put_tty_queue and __f_setown functions. NOTE: the vulnerability was addressed in a different way in 2.6.32.9. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/06/15/5 - http://www.ubuntu.com/usn/
VE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/06/15/5 - http://www.ubuntu.com/usn/USN-1000-1 - https://bugzilla.kernel.org/show_bug.cgi?id=14605 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.6 - http://www.openwall.com/lists/oss-security/2010/06/15/2 - http://www.openwall.com/lists/oss-security/2010/06/15/3 - http://www.openwall.com/lists/oss-security/2010/06/15/4 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=703625118069f9f8960d356676662d3db5a9d116 - https://bugzilla.redhat.com/show_bug.cgi?id=559100 - http://www.debian.org/security/2010/dsa-2094