Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0033 State: PUBLISHED Published: 2009-06-05T15:25:00 Last Updated: 2024-08-07T04:17:10.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://marc.info
tional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://marc.info/?l=bugtraq&m=127420533226623&w=2 - http://secunia.com/advisories/35326 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:138 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html - http://www.debian.org/security/2011/dsa-2207 - http://secunia.com/advisories/35344 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://secunia.com/advisories/37460 - http://www.vupen.com/english/advisories/2010/3056 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://secunia.com/advisories/35788 - http://marc.info/?l=bugtr
www.vmware.com/security/advisories/VMSA-2009-0016.html - http://secunia.com/advisories/35788 - http://marc.info/?l=bugtraq&m=127420533226623&w=2 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://jvn.jp/en/jp/JVN87272440/index.html - http://www.vupen.com/english/advisories/2009/1496 - http://marc.info/?l=bugtraq&m=133469267822771&w=2 - http://securitytracker.com/id?1022331 - http://www.vupen.com/english/advisories/2009/1856 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10231 - http://www.securityfocus.com/bid/35193 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:176 - http://www.securityfocus.com/archi
cus.com/bid/35193 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:176 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/42368 - http://tomcat.apache.org/security-6.html - http://www.securityfocus.com/archive/1/504044/100/0/threaded - http://support.apple.com/kb/HT4077 - http://svn.apache.org/viewvc?rev=742915&view=rev - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html - http://svn.apache.org/viewvc?rev=781362&view=rev - http://secunia.com/advisories/35685 - http://marc.info/?l=bugtraq&m=133469267822771&w=2 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html - http:/
raq&m=133469267822771&w=2 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html - http://tomcat.apache.org/security-5.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19110 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://marc.info/?l=bugtraq&m=129070310906557&w=2 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:136 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1 - http://marc.info/?l=bugtraq&m=129070310906557&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50928 - http://www.vupen.com
nfo/?l=bugtraq&m=129070310906557&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50928 - http://www.vupen.com/english/advisories/2009/3316 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5739 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c
CVE ID: CVE-2009-0034 State: PUBLISHED Published: 2009-01-30T19:00:00 Last Updated: 2024-08-07T04:17:10.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33885 - http://osvdb.org/51736 - http://www.sudo.ws/cgi-bin/cvsweb/sudo/parse.c.diff?r1=1.160.2.21&r2=1.160.2.22&f=h - http://secunia.com/adv
org/51736 - http://www.sudo.ws/cgi-bin/cvsweb/sudo/parse.c.diff?r1=1.160.2.21&r2=1.160.2.22&f=h - http://secunia.com/advisories/35766 - http://www.securitytracker.com/id?1021688 - http://www.securityfocus.com/bid/33517 - https://issues.rpath.com/browse/RPL-2954 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:033 - http://www.vupen.com/english/advisories/2009/1865 - http://secunia.com/advisories/33753 - http://www.redhat.com/support/errata/RHSA-2009-0267.html - http://lists.vmware.com/pipermail/security-announce/2009/000060.html - http://www.securityfocus.com/archive/1/500546/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A
rchive/1/500546/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6462 - http://secunia.com/advisories/33840 - http://wiki.rpath.com/Advisories:rPSA-2009-0021 - http://www.securityfocus.com/archive/1/504849/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10856 - http://www.gratisoft.us/bugzilla/show_bug.cgi?id=327 - http://www.vmware.com/security/advisories/VMSA-2009-0009.html - https://bugzilla.novell.com/show_bug.cgi?id=468923
CVE ID: CVE-2009-0035 State: PUBLISHED Published: 2019-11-09T02:02:21 Last Updated: 2024-08-07T04:17:10.368Z Vendors: alsa-driver Products: alsa-driver Problem Types: Other Description: alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2009-0035 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0035 - https://access.redhat.com/security/cve/cve-2009-0035
CVE ID: CVE-2009-0036 State: PUBLISHED Published: 2009-02-11T20:00:00 Last Updated: 2024-08-07T04:17:10.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sending the remainder of the packet with crafted values in the header, related to use of uninitialized memory in a validation check. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10127 - https://www.redhat.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10127 - https://www.redhat.com/archives/libvir-list/2009-January/msg00728.html - https://www.redhat.com/archives/libvir-list/2009-January/msg00726.html - http://www.securityfocus.com/bid/33724 - https://www.redhat.com/archives/libvir-list/2009-January/msg00699.html - https://bugzilla.redhat.com/show_bug.cgi?id=484947 - http://www.redhat.com/support/errata/RHSA-2009-0382.html - http://git.et.redhat.com/?p=libvirt.git%3Ba=commitdiff%3Bh=2bb0657e28 - http://openwall.com/lists/oss-security/2009/02/10/8 - http://secunia.com/advisories/34397
CVE ID: CVE-2009-0037 State: PUBLISHED Published: 2009-03-05T02:00:00 Last Updated: 2024-08-07T04:17:10.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-726-1 - http://secunia.com/advisories/34259 - http://curl.haxx.se/
ontainer: References: - http://www.ubuntu.com/usn/USN-726-1 - http://secunia.com/advisories/34259 - http://curl.haxx.se/lxr/source/CHANGES - http://secunia.com/advisories/35766 - http://secunia.com/advisories/34255 - http://www.redhat.com/support/errata/RHSA-2009-0341.html - http://www.debian.org/security/2009/dsa-1738 - http://www.withdk.com/2009/03/03/curllibcurl-redirect-arbitrary-file-access/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/49030 - http://www.vupen.com/english/advisories/2009/1865 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0042 - http://lists.opensuse.org/opensuse-security-announce/2
001.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0042 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html - http://secunia.com/advisories/34138 - http://curl.haxx.se/docs/adv_20090303.html - http://secunia.com/advisories/34202 - http://www.securityfocus.com/archive/1/501757/100/0/threaded - http://www.vupen.com/english/advisories/2009/0581 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.476602 - http://lists.vmware.com/pipermail/security-announce/2009/000060.html - http://www.securityfocus.com/bid/33962 - http://support.apple.com/kb/HT4077 - http://www.withdk.com/archives/Libcurl_arbitrary_file_access.pdf - https:
d/33962 - http://support.apple.com/kb/HT4077 - http://www.withdk.com/archives/Libcurl_arbitrary_file_access.pdf - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11054 - http://security.gentoo.org/glsa/glsa-200903-21.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6074 - http://www.securitytracker.com/id?1021783 - http://secunia.com/advisories/34251 - http://secunia.com/advisories/34399 - http://www.securityfocus.com/archive/1/504849/100/0/threaded - http://secunia.com/advisories/34237 - http://www.vmware.com/security/advisories/VMSA-2009-0009.html
CVE ID: CVE-2009-0038 State: PUBLISHED Published: 2009-04-17T14:00:00 Last Updated: 2024-08-07T04:17:10.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4) description parameter to console/portal/Server/Monitoring; or (5) the PATH_INFO to the default URI under console/portal/. Additional Analyst Notes: - CVE Program Container: References: - http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214 - http://www.vupen
Container: References: - http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214 - http://www.vupen.com/english/advisories/2009/1089 - http://www.securityfocus.com/bid/34562 - http://www.securityfocus.com/archive/1/502734/100/0/threaded - http://issues.apache.org/jira/browse/GERONIMO-4597 - http://secunia.com/advisories/34715 - http://dsecrg.com/pages/vul/show.php?id=119
CVE ID: CVE-2009-0039 State: PUBLISHED Published: 2009-04-17T14:00:00 Last Updated: 2024-08-07T04:17:10.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to hijack the authentication of administrators for requests that (1) change the web administration password, (2) upload applications, and perform unspecified other administrative actions, as demonstrated by (3) a Shutdown request to console/portal//Server/Shutdown. Additional Analyst Notes: - CVE Program Container: References: - http://geronimo.apache.org/21
/portal//Server/Shutdown. Additional Analyst Notes: - CVE Program Container: References: - http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214 - http://www.vupen.com/english/advisories/2009/1089 - http://www.securityfocus.com/bid/34562 - http://issues.apache.org/jira/browse/GERONIMO-4597 - http://secunia.com/advisories/34715 - http://www.securityfocus.com/archive/1/502735/100/0/threaded - http://dsecrg.com/pages/vul/show.php?id=120
CVE ID: CVE-2009-0040 State: PUBLISHED Published: 2009-02-22T22:00:00 Last Updated: 2024-08-07T04:17:10.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2009-0315.html
ditional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2009-0315.html - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html - http://support.apple.com/kb/HT3757 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html - http://security.gentoo.org/glsa/glsa-200903-28.xml - http://www.redhat.com/support/errata/RHSA-2009-0333.html - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/35386 - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://www.debian.org/security/2009/dsa-1830 - http://www.vupen.com/english/advisories/2009/0632 - http://www.vupen.com/english/advisories/2009/162
ity/2009/dsa-1830 - http://www.vupen.com/english/advisories/2009/0632 - http://www.vupen.com/english/advisories/2009/1621 - http://www.redhat.com/support/errata/RHSA-2009-0340.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1 - http://support.apple.com/kb/HT3549 - http://www.vupen.com/english/advisories/2009/1560 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10316 - http://www.vupen.com/english/advisories/2009/0469 - http://secunia.com/advisories/34388 - http://www.vupen.com/english/advisories/2009/1462 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420 - http://lists.apple.co
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://secunia.com/advisories/36096 - http://sourceforge.net/mailarchive/message.php?msg_name=e56ccc8f0902181726i200f4bf0n20d919473ec409b7%40mail.gmail.com - http://www.vmware.com/security/advisories/VMSA-2009-0007.html - http://www.redhat.com/support/errata/RHSA-2009-0325.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1 - http://secunia.com/advisories/35302 - http://secunia.com/advisories/33976 - http://secunia.com/advisories/35074 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48819 - ht
advisories/33976 - http://secunia.com/advisories/35074 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48819 - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/34140 - http://www.vupen.com/english/advisories/2009/1451 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00272.html - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:083 - http://secunia.com/advisories/34464 - http://secunia.com/advisor
.mandriva.com/security/advisories?name=MDVSA-2009:083 - http://secunia.com/advisories/34464 - http://secunia.com/advisories/34272 - http://secunia.com/advisories/34210 - ftp://ftp.simplesystems.org/pub/png/src/libpng-1.2.34-ADVISORY.txt - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6458 - http://secunia.com/advisories/34265 - http://wiki.rpath.com/Advisories:rPSA-2009-0046 - http://secunia.com/advisories/34145 - http://www.securityfocus.com/archive/1/503912/100/0/threaded - http://secunia.com/advisories/35379 - http://www.vupen.com/english/advisories/2009/0473 - http://www.se
100/0/threaded - http://secunia.com/advisories/35379 - http://www.vupen.com/english/advisories/2009/0473 - http://www.securityfocus.com/archive/1/505990/100/0/threaded - http://secunia.com/advisories/34143 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html - http://www.debian.org/security/2009/dsa-1750 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952 - http://secunia.com/advisories/33970 - http://secunia.com/advisories/34137 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://lists.vmware.com/pipermail/security-announ
isories/34137 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://lists.vmware.com/pipermail/security-announce/2009/000062.html - http://sourceforge.net/project/shownotes.php?group_id=1689&release_id=662441 - http://secunia.com/advisories/34462 - http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm - http://www.vupen.com/english/advisories/2009/1297 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00412.html - http://downloads.sourceforge.net/libpng/libpng-1.2.34-ADVISORY.txt - http://www.kb.cert.org/vuls/id/649212 - http://secunia.com/advisories/34324 - http://www.securityfocus.com/archive/1/501767/100/0/threaded - http://secunia.com/advisories/341
.com/advisories/34324 - http://www.securityfocus.com/archive/1/501767/100/0/threaded - http://secunia.com/advisories/34152 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:075 - http://www.securityfocus.com/bid/33990 - http://support.apple.com/kb/HT3613 - http://secunia.com/advisories/35258 - http://www.securityfocus.com/bid/33827 - http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm - http://www.vupen.com/english/advisories/2009/2172 - http://www.us-cert.gov/cas/techalerts/TA09-218A.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:051 - http://secunia.com/advisories/34320 - http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.product
1 - http://secunia.com/advisories/34320 - http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document
CVE ID: CVE-2009-0041 State: PUBLISHED Published: 2009-01-14T23:00:00 Last Updated: 2024-08-07T04:17:10.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x before B.2.5.7, C.1.x.x before C.1.10.4, and C.2.x.x before C.2.1.2.1; and s800i 1.2.x before 1.3.0 responds differently to a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200905-01.xml - http://www.securityfocus.c
: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200905-01.xml - http://www.securityfocus.com/archive/1/499884/100/0/threaded - http://secunia.com/advisories/33453 - http://securityreason.com/securityalert/4910 - http://www.securityfocus.com/bid/33174 - http://secunia.com/advisories/37677 - http://www.debian.org/security/2009/dsa-1952 - http://www.securitytracker.com/id?1021549 - http://downloads.digium.com/pub/security/AST-2009-001.html - http://www.vupen.com/english/advisories/2009/0063 - http://secunia.com/advisories/34982
CVE ID: CVE-2009-0042 State: PUBLISHED Published: 2009-01-28T01:00:00 Last Updated: 2024-08-07T04:17:10.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file. Additional Analyst Notes: - CVE Program Container: References: - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601 - http://www.vupen.com/english/advisories/2009/02
p://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601 - http://www.vupen.com/english/advisories/2009/0270 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48261 - http://www.securityfocus.com/bid/33464 - http://www.securityfocus.com/archive/1/500417/100/0/threaded - http://www.securitytracker.com/id?1021639 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/26/ca20090126-01-ca-anti-virus-engine-detection-evasion-multiple-vulnerabilities.aspx
CVE ID: CVE-2009-0043 State: PUBLISHED Published: 2009-01-08T19:00:00 Last Updated: 2024-08-07T04:17:10.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33161 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148 - http://securityreason.com/securityalert/4887 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.as
ttp://securityreason.com/securityalert/4887 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx - http://www.securityfocus.com/archive/1/499857/100/0/threaded - http://www.vupen.com/english/advisories/2009/0053
CVE ID: CVE-2009-0046 State: PUBLISHED Published: 2009-01-07T18:00:00 Last Updated: 2024-08-07T04:17:10.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun GridEngine 5.3 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/499827/100/0/threaded - http://www.vupen.com/english/advisories/2009/0045 - http://www.ocert.org/advisories/ocert-2008-016.html
CVE ID: CVE-2009-0047 State: PUBLISHED Published: 2009-01-07T18:00:00 Last Updated: 2024-08-07T04:17:10.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gale 0.99 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/499827/100/0/threaded - http://www.ocert.org/advisories/ocert-2008-016.html - http://www.vupen.com/english/advisories/2009/0046