Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2303 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:44:55.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Aardvark Topsites PHP 5.2.1 and earlier allows remote attackers to obtain sensitive information via a negative integer value for the start parameter in a search action, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504574/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/51392 - http://websec.id3as.com/aardvark-topsites-php-521-security-vulnerabilities-disclosure/
CVE ID: CVE-2009-2304 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:44:55.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to obtain sensitive information via a nonexistent account name in the u parameter in a rate action, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504574/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/51392 - http://websec.id3as.com/aardvark-topsites-php-521-security-vulnerabilities-disclosure/
CVE ID: CVE-2009-2305 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:44:55.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of //.\ (slash slash dot backslash) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35671 - http://www.exploit-db.com/exploits/9067
CVE ID: CVE-2009-2306 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:44:55.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing usernames and passwords via a direct request for dvr.ini. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35671 - http://www.exploit-db.com/exploits/9066
CVE ID: CVE-2009-2307 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:44:55.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro (aka MD-Pro) allows remote attackers to execute arbitrary SQL commands via the rid parameter in a viewrecords action to modules.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51478 - http://www.exploit-db.com/exploits/9056
CVE ID: CVE-2009-2308 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:44:55.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation (aka Affiliates) module 1.1.0 and earlier for PunBB allow remote attackers to execute arbitrary SQL commands via the (1) in or (2) out parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9055 - http://packetstormsecurity.org/0906-exploits/punbbaffiliationsin-blindsql.txt - http://www.osvdb.org/55478 - http://packetstormsecurity.org/0906-exploits/punbbaffiliations-blindsql.txt - http://secunia.c
p://www.osvdb.org/55478 - http://packetstormsecurity.org/0906-exploits/punbbaffiliations-blindsql.txt - http://secunia.com/advisories/35654 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51437
CVE ID: CVE-2009-2309 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:44:55.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Codice CMS 2 allows remote attackers to execute arbitrary SQL commands via the tag parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34208 - http://www.exploit-db.com/exploits/8272
CVE ID: CVE-2009-2310 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:44:55.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in include/get_read.php in Extensible-BioLawCom CMS (X-BLC) 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the section parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34197 - http://www.exploit-db.com/exploits/8258 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49352
CVE ID: CVE-2009-2311 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:44:55.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote attackers to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49351 - http://www.exploit-db.com/exploits/8254 - http://www.securityfocus.com/bid/34194
CVE ID: CVE-2009-2312 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:44:55.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49338 - http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html - http://secunia.com/advisories/34390
CVE ID: CVE-2009-2313 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:44:56.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8278
CVE ID: CVE-2009-2314 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the Sun Lightweight Availability Collection Tool 3.0 on Solaris 7 through 10 allows local users to overwrite arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1772 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020599.1-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-261408-1 - http://www.securityfocus.com/bid/35568 - http://www.securitytracker.com/id?1022510 - http://secunia.com/advi
-261408-1 - http://www.securityfocus.com/bid/35568 - http://www.securitytracker.com/id?1022510 - http://secunia.com/advisories/35707 - http://osvdb.org/55559
CVE ID: CVE-2009-2315 State: REJECTED Published: 2009-07-05T16:00:00 Last Updated: 2009-07-15T09:00:00 Description: No description available.
CVE ID: CVE-2009-2316 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0 allow remote attackers to inject arbitrary web script or HTML by entering an unspecified URL in (1) the self-service UI interface or (2) the console interface. NOTE: it was later reported that 4.6.0 is also affected by the first vector. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2106 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54310 - http://www.securityfocus
.com/english/advisories/2009/2106 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54310 - http://www.securityfocus.com/bid/35566 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55518 - http://www-01.ibm.com/support/docview.wss?uid=swg24023640 - http://secunia.com/advisories/35696 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54311 - http://www-01.ibm.com/support/docview.wss?uid=swg24023929 - http://secunia.com/advisories/36119 - http://osvdb.org/55550 - http://www.securitytracker.com/id?1022508 - http://www.vupen.com/english/advisories/2009/1774 - http://osvdb.org/55551
CVE ID: CVE-2009-2317 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Axesstel MV 410R has a certain default administrator password, and does not force a password change, which makes it easier for remote attackers to obtain access. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55680 - http://www.securityfocus.com/bid/35563 - http://www.securityfocus.com/archive/1/504716/100/0/threaded
CVE ID: CVE-2009-2318 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Axesstel MV 410R allows remote attackers to cause a denial of service via a flood of SYN packets, a related issue to CVE-1999-0116. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35563 - http://www.securityfocus.com/archive/1/504716/100/0/threaded
CVE ID: CVE-2009-2319 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the Wi-Fi component on the Axesstel MV 410R does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35563 - http://www.securityfocus.com/archive/1/504716/100/0/threaded
CVE ID: CVE-2009-2320 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on the Axesstel MV 410R relies on client-side JavaScript code to validate input, which allows remote attackers to send crafted data, and possibly have unspecified other impact, via a client that does not process JavaScript. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35563 - http://www.securityfocus.com/archive/1/504716/100/0/threaded
CVE ID: CVE-2009-2321 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to cause a denial of service (configuration reset) via a RESTORE=RESTORE query string. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55681 - http://www.securityfocus.com/bid/35563 - http://www.securityfocus.com/archive/1/504716/100/0/threaded
CVE ID: CVE-2009-2322 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:56.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35563 - http://www.securityfocus.com/archive/1/504716/100/0/threaded
CVE ID: CVE-2009-2323 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on the Axesstel MV 410R redirects users back to the referring page after execution of some CGI scripts, which makes it easier for remote attackers to avoid detection of cross-site request forgery (CSRF) attacks, as demonstrated by a redirect from the cgi-bin/wireless.cgi script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35563 - http://www.securityfocus.com/archive/1/504716/100/0/threaded
CVE ID: CVE-2009-2324 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitrary web script or HTML via components in the samples (aka _samples) directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.ocert.org/advisories/ocert-2009-007.html - http://www.securitytracker.com/id?1022513 - http://www.securityfocus.com/archive/1/504721/100/0/threaded
CVE ID: CVE-2009-2325 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Clicknet CMS 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the side parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1736 - http://secunia.com/advisories/35607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51427 - http://www.osvdb.org/55484 - http://www.exploit-db.com/exploits/9037
CVE ID: CVE-2009-2326 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) an enter_parol cookie to index.php in an auto action or (2) the topic parameter to message.php. NOTE: vector 2 can be leveraged for a cross-site scripting (XSS) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9068 - http://osvdb.org/55693
CVE ID: CVE-2009-2327 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the v_variant1 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55676 - http://www.exploit-db.com/exploits/9068 - http://osvdb.org/55695
CVE ID: CVE-2009-2328 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remote attackers to delete arbitrary accounts and conduct SQL injection attacks via the del_user_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9068
CVE ID: CVE-2009-2329 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: KerviNet Forum 1.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) admin/head.php, or (2) voting_diagram.php, (3) voting.php, (4) topics_search.php, (5) topics_list.php, (6) top_part.php, (7) quick_search.php, (8) quick_reply.php, (9) moder_menu.php, (10) messages_list.php, (11) menu.php, (12) head.php, (13) forums_list.php, (14) forum_statistics.php, (15) forum_info.php, or (16) birthday.php in include_files/, which reveals the installation path in an error message. Additional A
_info.php, or (16) birthday.php in include_files/, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9068
CVE ID: CVE-2009-2330 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/admin_menu.php in CMS Chainuk 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the menu parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9069 - http://osvdb.org/55674
CVE ID: CVE-2009-2331 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple static code injection vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to inject arbitrary PHP code (1) into settings.php via the menu parameter to admin_settings.php or (2) into a content/=NUMBER.php file via the title parameter to admin_new.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9069 - http://osvdb.org/55672 - http://osvdb.org/55673
CVE ID: CVE-2009-2332 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via (1) a crafted id parameter to index.php or (2) a nonexistent folder name in the id parameter to admin/admin_delete.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55671 - http://www.exploit-db.com/exploits/9069 - http://osvdb.org/55670
CVE ID: CVE-2009-2333 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the menu parameter to admin/admin_menu.php, and the id parameter to (2) index.php and (3) admin/admin_edit.php; and (4) delete arbitrary local files via a .. (dot dot) in the id parameter to admin/admin_delete.php. NOTE: vector 2 can be leveraged for static code injection by sending a crafted menu parameter to admin/admin_menu.php, and then sending an id=../me
aged for static code injection by sending a crafted menu parameter to admin/admin_menu.php, and then sending an id=../menu.csv request to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55666 - http://www.exploit-db.com/exploits/9069 - http://osvdb.org/55668 - http://osvdb.org/55669 - http://osvdb.org/55667
CVE ID: CVE-2009-2334 State: PUBLISHED Published: 2009-07-10T20:25:00 Last Updated: 2024-08-07T05:44:55.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a configuration file in the page parameter to obtain sensitive information or modify this file, as demonstrated by the (1) collapsing-archives/options.txt, (2) akismet/readme.txt, (3) related-ways-to-take-action/options.php, (4) wp-security-scan/securityscan.php, and (5) wp-ids/ids-admin.php files. NOTE: this can be leveraged for cross-sit
hp, (4) wp-security-scan/securityscan.php, and (5) wp-ids/ids-admin.php files. NOTE: this can be leveraged for cross-site scripting (XSS) and denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html - http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html - http://wordpress.org/development/2009/07/wordpress-2-8-1/ - http://www.securityfocus.com/archive/1/504795/100/0/threaded - http://securitytracker.com/id?1022528 - https://www.redhat.com/archives/fedora
cus.com/archive/1/504795/100/0/threaded - http://securitytracker.com/id?1022528 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html - http://www.vupen.com/english/advisories/2009/1833 - http://www.debian.org/security/2009/dsa-1871 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html - http://www.osvdb.org/55712 - http://www.securityfocus.com/bid/35584 - http://www.osvdb.org/55715 - http://www.exploit-db.com/exploits/9110
CVE ID: CVE-2009-2335 State: PUBLISHED Published: 2009-07-10T20:25:00 Last Updated: 2024-08-07T05:44:55.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for "user convenience." Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html - http://corelabs.coresecurity.com/index.php?action=view
.com/archives/fedora-package-announce/2009-August/msg00608.html - http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html - http://www.securityfocus.com/archive/1/504795/100/0/threaded - http://securitytracker.com/id?1022528 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html - http://www.vupen.com/english/advisories/2009/1833 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html - http://www.osvdb.org/55713 - http://www.exploit-db.com/exploits/9110 - http://www.securityfocus.com/bid/35581
CVE ID: CVE-2009-2336 State: PUBLISHED Published: 2009-07-10T20:25:00 Last Updated: 2024-08-07T05:44:56.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for "user convenience." Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html - http://corelabs.coresecur
erences: - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html - http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html - http://www.securityfocus.com/archive/1/504795/100/0/threaded - http://securitytracker.com/id?1022528 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html - http://www.vupen.com/english/advisories/2009/1833 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html - http://www.exploit-db.com/exploits/9110 - http://www.osvdb.org/55714 - http://www.securityfocus
9-August/msg00597.html - http://www.exploit-db.com/exploits/9110 - http://www.osvdb.org/55714 - http://www.securityfocus.com/bid/35581