Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
10-06/msg00001.html - http://secunia.com/advisories/36670 - http://secunia.com/advisories/36671 - http://secunia.com/advisories/38977 - http://secunia.com/advisories/36669 - http://www.redhat.com/support/errata/RHSA-2010-0154.html - http://www.redhat.com/support/errata/RHSA-2009-1432.html - http://www.mozilla.org/security/announce/2009/mfsa2009-49.html - https://bugzilla.mozilla.org/show_bug.cgi?id=506871 - http://secunia.com/advisories/37098 - http://www.ubuntu.com/usn/USN-915-1 - http://www.redhat.com/support/errata/RHSA-2009-1431.html
CVE ID: CVE-2009-3078 State: PUBLISHED Published: 2009-09-10T21:00:00 Last Updated: 2024-08-07T06:14:55.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Visual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to trigger a vertical scroll and spoof URLs via unspecified Unicode characters with a tall line-height property. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1885 - http://www.securityfocus.com/bid/36343 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html - http://www.redhat.com/support/errata/RHSA-2009-1430.html - https://bugzilla.mozil
rity/advisories/2009_48_firefox.html - http://www.redhat.com/support/errata/RHSA-2009-1430.html - https://bugzilla.mozilla.org/show_bug.cgi?id=453827 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5418 - http://secunia.com/advisories/36692 - http://secunia.com/advisories/36670 - http://secunia.com/advisories/36671 - http://www.mozilla.org/security/announce/2009/mfsa2009-50.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10871 - http://secunia.com/advisories/37098 - http://www.securitytracker.com/id?1022875
CVE ID: CVE-2009-3079 State: PUBLISHED Published: 2009-09-10T21:00:00 Last Updated: 2024-08-07T06:14:56.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute arbitrary JavaScript with chrome privileges via vectors involving an object, the FeedWriter, and the BrowserFeedWriter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36343 - http://www.debian.org/security/2009/dsa-1886 - http://www.novell.com/linux/security/advisories/2009_48_firefox.html - http://www.redhat.com/support/errata/RHSA-2009-1430.html - http://sec
m/linux/security/advisories/2009_48_firefox.html - http://www.redhat.com/support/errata/RHSA-2009-1430.html - http://secunia.com/advisories/36670 - http://secunia.com/advisories/36671 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10390 - http://www.mozilla.org/security/announce/2009/mfsa2009-51.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6250 - http://www.securitytracker.com/id?1022873 - http://secunia.com/advisories/36757 - https://bugzilla.mozilla.org/show_bug.cgi?id=454363 - http://secunia.com/advisories/37098
CVE ID: CVE-2009-3080 State: PUBLISHED Published: 2009-11-20T17:00:00 Last Updated: 2024-08-07T06:14:55.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38276 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:030 - http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html - http://www.ubuntu.com/usn/usn-864-1 - http://lists.
ists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html - http://www.ubuntu.com/usn/usn-864-1 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html - http://secunia.com/advisories/37435 - http://support.avaya.com/css/P8/documents/100073666 - http://secunia.com/advisories/37720 - http://secunia.com/advisories/37909 - http://www.redhat.com/support/errata/RHSA-2010-0882.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc8 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mit
linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc8 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7101 - http://www.vmware.com/security/advisories/VMSA-2011-0009.html - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html - http://www.securityfocus.com/bid/37068 - https://rhn.redhat.com/errata/RHSA-2010-0095.html - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html - https://rhn.redhat.com/errata/RHSA-2010-0046.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12862 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=690e744869f3262855b
oval%3Adef%3A12862 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=690e744869f3262855b83b4fb59199cf142765b0 - http://www.debian.org/security/2010/dsa-2005 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00777.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10989 - http://www.redhat.com/support/errata/RHSA-2010-0041.html - http://secunia.com/advisories/38017
CVE ID: CVE-2009-3081 State: PUBLISHED Published: 2009-09-04T20:00:00 Last Updated: 2024-08-07T06:14:55.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the month parameter in a calendar action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/57464 - http://secunia.com/advisories/36479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52893
CVE ID: CVE-2009-3082 State: PUBLISHED Published: 2009-09-04T20:00:00Z Last Updated: 2024-09-16T17:38:16.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wcategory.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36124
CVE ID: CVE-2009-3083 State: PUBLISHED Published: 2009-09-08T18:00:00 Last Updated: 2024-08-07T06:14:55.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client. Additional Analyst Notes: - CVE Program Container: References: - http://developer.pidgin.im/ticket/10159 - http://secunia.com/advisories/36601 - http://www.pidgin.im/news/security/in
- http://developer.pidgin.im/ticket/10159 - http://secunia.com/advisories/36601 - http://www.pidgin.im/news/security/index.php?id=39 - http://developer.pidgin.im/viewmtn/revision/diff/6d3fc30a0a0a379281efc5a6872a9c1d7c24c650/with/b4a95ea62b81a06ffc1993912471c511b786efdd/libpurple/protocols/msn/slp.c - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11852 - http://www.securityfocus.com/bid/36277 - http://developer.pidgin.im/viewmtn/revision/info/b4a95ea62b81a06ffc1993912471c511b786efdd - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6322
CVE ID: CVE-2009-3084 State: PUBLISHED Published: 2009-09-08T18:00:00 Last Updated: 2024-08-07T06:14:55.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service (application crash) via a handwritten (aka Ink) message, related to an uninitialized variable and the incorrect "UTF16-LE" charset name. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36601 - http://developer.pidgin.im/viewmtn/revision/diff/92ce3e48744b40fb0fea89e3de5e44b
- http://secunia.com/advisories/36601 - http://developer.pidgin.im/viewmtn/revision/diff/92ce3e48744b40fb0fea89e3de5e44bedb100c07/with/567e16cbc46168f52482e5ec27626c48e7a5ba95/libpurple/protocols/msn/slpcall.c - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6338 - http://www.pidgin.im/news/security/index.php?id=38 - http://www.securityfocus.com/bid/36277 - http://developer.pidgin.im/viewmtn/revision/info/567e16cbc46168f52482e5ec27626c48e7a5ba95
CVE ID: CVE-2009-3085 State: PUBLISHED Published: 2009-09-08T18:00:00 Last Updated: 2024-08-07T06:14:56.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36601 - http://developer.pidgin.im/viewmtn/revision/info/fd5955618eddcd84d522b30ff11102f9601f38c8 - http://www.pidgin.im/news/security/index.php?id=37 - http://www.secu
ion/info/fd5955618eddcd84d522b30ff11102f9601f38c8 - http://www.pidgin.im/news/security/index.php?id=37 - http://www.securityfocus.com/bid/36277 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6434 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11223
CVE ID: CVE-2009-3086 State: PUBLISHED Published: 2009-09-08T18:00:00 Last Updated: 2024-08-07T06:14:56.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x before 2.3.4, leaks information about the complexity of message-digest signature verification in the cookie store, which might allow remote attackers to forge a digest via multiple attempts. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36600 - http://www.securityfocus.com/bid/37427 - http://www.vupen.com/english/advisories/2009/2544 - http://www.debian.org/security/2011/dsa-2260 - http://weblog.rubyonrails.org/
w.vupen.com/english/advisories/2009/2544 - http://www.debian.org/security/2011/dsa-2260 - http://weblog.rubyonrails.org/2009/9/4/timing-weakness-in-ruby-on-rails - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
CVE ID: CVE-2009-3087 State: PUBLISHED Published: 2009-09-08T18:00:00Z Last Updated: 2024-09-17T00:25:28.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in nserver.exe in the server in IBM Lotus Domino 8.0 on Windows Server 2003 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References
is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36556 - http://intevydis.com/vd-list.shtml
CVE ID: CVE-2009-3088 State: PUBLISHED Published: 2009-09-08T18:00:00Z Last Updated: 2024-09-16T22:36:02.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in ibmdiradm in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to have an unspecified impact via unknown vectors that trigger heap corruption, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: Referen
sue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36565 - http://intevydis.com/vd-list.shtml
CVE ID: CVE-2009-3089 State: PUBLISHED Published: 2009-09-08T18:00:00Z Last Updated: 2024-09-16T16:42:54.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Directory Server (TDS) 6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors, related to (1) the ibmslapd.exe daemon on Windows and (2) the ibmdiradm daemon in the administration server on Linux, as demonstrated by certain modules in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2006-0717. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researche
90903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36565 - http://intevydis.com/vd-list.shtml
CVE ID: CVE-2009-3090 State: PUBLISHED Published: 2009-09-08T18:00:00Z Last Updated: 2024-09-17T02:21:59.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36565 -
racking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36565 - http://intevydis.com/vd-list.shtml
CVE ID: CVE-2009-3091 State: PUBLISHED Published: 2009-09-08T18:00:00Z Last Updated: 2024-09-16T20:37:11.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on the ASUS WL-330gE has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://intevydis.com/vd-list.shtml
CVE ID: CVE-2009-3092 State: PUBLISHED Published: 2009-09-08T18:00:00Z Last Updated: 2024-09-16T19:45:49.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow on the ASUS WL-500W wireless router has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36439 - http://www.securityfocus.com/bid/36236 - http://int
ogram Container: References: - http://secunia.com/advisories/36439 - http://www.securityfocus.com/bid/36236 - http://intevydis.com/vd-list.shtml
CVE ID: CVE-2009-3093 State: PUBLISHED Published: 2009-09-08T18:00:00Z Last Updated: 2024-09-17T00:31:22.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on the ASUS WL-500W wireless router has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36439 - http://www.securityfocus.com/bid/36236 -
: - CVE Program Container: References: - http://secunia.com/advisories/36439 - http://www.securityfocus.com/bid/36236 - http://intevydis.com/vd-list.shtml
CVE ID: CVE-2009-3094 State: PUBLISHED Published: 2009-09-08T18:00:00 Last Updated: 2024-08-07T06:14:56.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10981 - http://www.v
00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10981 - http://www.vupen.com/english/advisories/2010/0609 - http://marc.info/?l=bugtraq&m=127557640302499&w=2 - http://marc.info/?l=bugtraq&m=126998684522511&w=2 - http://marc.info/?l=bugtraq&m=126998684522511&w=2 - http://secunia.com/advisories/37152 - http://www.debian.org/security/2009/dsa-1934 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK96858 - http://www.securityfocus.com/archive/1/508075/100/0/threaded - http://www.intevydis.com/blog/?p=59 - http://marc.info/?l=bugtraq&m=133355494609819&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3
l=bugtraq&m=133355494609819&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8087 - http://marc.info/?l=bugtraq&m=133355494609819&w=2 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00645.html - http://www-01.ibm.com/support/docview.wss?uid=swg1PM09161 - http://wiki.rpath.com/Advisories:rPSA-2009-0155 - http://marc.info/?l=bugtraq&m=127557640302499&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=521619 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00944.html - http://intevydis.com/vd-list.shtml - http://secunia.com/advisories/36549 - https://lists.apache.org/thread.html/54a42d4b01968df1117ce
dis.com/vd-list.shtml - http://secunia.com/advisories/36549 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://list
he.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc2
%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r
254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apac
%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2009-3095 State: PUBLISHED Published: 2009-09-08T18:00:00 Last Updated: 2024-08-07T06:14:56.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m
opensuse-security-announce/2009-10/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8662 - http://marc.info/?l=bugtraq&m=127557640302499&w=2 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://marc.info/?l=bugtraq&m=126998684522511&w=2 - http://marc.info/?l=bugtraq&m=126998684522511&w=2 - http://secunia.com/advisories/37152 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://www.debian.org/security/2009/dsa-1934 - http://www.securityfocus.com/archive/1/508075/100/0/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=522209 - http://marc.info/?l=bugtraq&m=133355494609819&w=2 - http://marc.info/?