Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
dhat.com/archives/fedora-package-announce/2009-June/msg01291.html - http://secunia.com/advisories/34991 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:101 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9683 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:087 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://secunia.com/advisories/35685 - http://www.vupen.com/english/advisories/2009/1076 - http://secunia.com/advisories/34756 - http://secunia.com/advisories/34291 - http://secunia.com/advisories/34755 - http://secunia.com/advisories/34852 - http://lists.opensuse.org/opensuse-security-annou
//secunia.com/advisories/34755 - http://secunia.com/advisories/34852 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html - http://secunia.com/advisories/34959 - https://bugzilla.redhat.com/show_bug.cgi?id=495894 - http://secunia.com/advisories/34746 - http://www.redhat.com/support/errata/RHSA-2009-0429.html
CVE ID: CVE-2009-1182 State: PUBLISHED Published: 2009-04-23T17:00:00 Last Updated: 2024-08-07T05:04:49.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1793 - http://secunia.com/advisories/34963 - https://bugzilla.redhat.com/show_bug.cgi?id=495896 - http://www.debian.org/security/2009/dsa-1790 - http://secunia.com/advisories/35037 - http://www.vupen.com/engl
=495896 - http://www.debian.org/security/2009/dsa-1790 - http://secunia.com/advisories/35037 - http://www.vupen.com/english/advisories/2009/1077 - http://secunia.com/advisories/35064 - http://www.vupen.com/english/advisories/2009/1066 - http://secunia.com/advisories/34481 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477 - http://www.redhat.com/support/errata/RHSA-2009-0431.html - http://www.vupen.com/english/advisories/2009/1065 - http://www.redhat.com/support/errata/RHSA-2009-0430.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html - http://secunia.com/advisories/35618 - https://oval.cisecurity.org/reposito
ra-package-announce/2009-July/msg00567.html - http://secunia.com/advisories/35618 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10735 - http://secunia.com/advisories/35065 - http://www.redhat.com/support/errata/RHSA-2009-0480.html - http://poppler.freedesktop.org/releases.html - http://www.securityfocus.com/bid/34568 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:175 - http://www.kb.cert.org/vuls/id/196617 - http://www.vupen.com/english/advisories/2010/1040 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html - http://rhn.redhat.com/errata/RHSA-2009-0458.html - https://www.redhat.com/archives/fedora-package-ann
04/msg00011.html - http://rhn.redhat.com/errata/RHSA-2009-0458.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html - http://secunia.com/advisories/34991 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:101 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:087 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://secunia.com/advisories/35685 - http://www.vupen.com/english/advisories/2009/1076 - http://secunia.com/advisories/34756 - http://secunia.com/advisories/34291 - http://secunia.com/advisories/34755 - http://secunia.com/advisories/34852 - http://lists.opensuse.org/opensuse-security-announce/2009-0
com/advisories/34755 - http://secunia.com/advisories/34852 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html - http://secunia.com/advisories/34959 - http://secunia.com/advisories/34746 - http://www.redhat.com/support/errata/RHSA-2009-0429.html - http://www.securitytracker.com/id?1022073
CVE ID: CVE-2009-1183 State: PUBLISHED Published: 2009-04-23T17:00:00 Last Updated: 2024-08-07T05:04:49.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1793 - http://secunia.com/advisories/34963 - http://www.debian.org/security/2009/dsa-1790 - http://secunia.com/advisories/35037 - http://www.vupen.com/english/advisories/2009/1077 - http://secunia.com/advisor
0 - http://secunia.com/advisories/35037 - http://www.vupen.com/english/advisories/2009/1077 - http://secunia.com/advisories/35064 - http://www.vupen.com/english/advisories/2009/1066 - http://secunia.com/advisories/34481 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477 - http://www.securitytracker.com/id?1022072 - http://www.redhat.com/support/errata/RHSA-2009-0431.html - http://www.vupen.com/english/advisories/2009/1065 - http://www.redhat.com/support/errata/RHSA-2009-0430.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html - https://bugzilla.redhat.com/show_bug.cgi?id=495899 - http://secunia.com/advisories/
e-announce/2009-July/msg00567.html - https://bugzilla.redhat.com/show_bug.cgi?id=495899 - http://secunia.com/advisories/35618 - http://secunia.com/advisories/35065 - http://www.redhat.com/support/errata/RHSA-2009-0480.html - http://poppler.freedesktop.org/releases.html - http://www.securityfocus.com/bid/34568 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:175 - http://www.kb.cert.org/vuls/id/196617 - http://www.vupen.com/english/advisories/2010/1040 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html - http://rhn.redhat.com/errata/RHSA-2009-0458.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10769 - https:
A-2009-0458.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10769 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html - http://secunia.com/advisories/34991 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:101 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:087 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://secunia.com/advisories/35685 - http://www.vupen.com/english/advisories/2009/1076 - http://secunia.com/advisories/34756 - http://secunia.com/advisories/34291 - http://secunia.com/advisories/34755 - http://secunia.com/advisories/34852 - http://lists.op
cunia.com/advisories/34291 - http://secunia.com/advisories/34755 - http://secunia.com/advisories/34852 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html - http://secunia.com/advisories/34959 - http://secunia.com/advisories/34746 - http://www.redhat.com/support/errata/RHSA-2009-0429.html
CVE ID: CVE-2009-1184 State: PUBLISHED Published: 2009-05-05T20:00:00 Last Updated: 2024-08-07T05:04:49.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: The selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux subsystem in the Linux kernel before 2.6.27.22, and 2.6.28.x before 2.6.28.10, when compat_net is enabled, omits calls to avc_has_perm for the (1) node and (2) port, which allows local users to bypass intended restrictions on network traffic. NOTE: this was incorrectly reported as an issue fixed in 2.6.27.21. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:135
al Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:135 - http://lwn.net/Articles/331435/ - http://www.mandriva.com/security/advisories?name=MDVSA-2009:118 - http://secunia.com/advisories/35656 - http://www.openwall.com/lists/oss-security/2009/05/04/1 - http://patchwork.ozlabs.org/patch/25238/ - http://www.ubuntu.com/usn/usn-793-1 - http://www.debian.org/security/2009/dsa-1800 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=910c9e41186762de3717baaf392ab5ff0c454496 - https://launchpad.net/bugs/cve/2009-1184 - http://lwn.net/Articles/331434/ - http://www.mandriva.com/security/advisories?name=M
/launchpad.net/bugs/cve/2009-1184 - http://lwn.net/Articles/331434/ - http://www.mandriva.com/security/advisories?name=MDVSA-2009:119 - http://secunia.com/advisories/35121
CVE ID: CVE-2009-1185 State: PUBLISHED Published: 2009-04-17T14:00:00 Last Updated: 2024-08-07T05:04:49.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/502752/100/0/threaded - http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5975 - http://secunia.com/advisories/34801 - http://secunia.com/advisories/35766 -
inition/oval%3Aorg.mitre.oval%3Adef%3A5975 - http://secunia.com/advisories/34801 - http://secunia.com/advisories/35766 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:104 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.html - http://www.debian.org/security/2009/dsa-1772 - http://www.gentoo.org/security/en/glsa/glsa-200904-18.xml - http://www.vupen.com/english/advisories/2009/1865 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10925 -
h/advisories/2009/1865 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10925 - http://www.securityfocus.com/bid/34536 - http://www.securitytracker.com/id?1022067 - http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=e2b362d9f23d4c63018709ab5f81a02f72b91e75 - http://www.redhat.com/support/errata/RHSA-2009-0427.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:103 - http://secunia.com/advisories/34776 - http://secunia.com/advisories/34731 - http://lists.vmware.com/pipermail/security-announce/2009/000060.html - http://secunia.com/advisories/34753 - http://secunia.com/advisories/34785 - http://secunia.com/advisories/34787 -
html - http://secunia.com/advisories/34753 - http://secunia.com/advisories/34785 - http://secunia.com/advisories/34787 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.html - https://launchpad.net/bugs/cve/2009-1185 - http://www.vupen.com/english/advisories/2009/1053 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00012.html - http://www.ubuntu.com/usn/usn-758-1 - http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=e86a923d508c2aed371cdd958ce82489cf2ab615 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691 - http://secunia.com/advisories/34771 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http:/
SA10691 - http://secunia.com/advisories/34771 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.securityfocus.com/archive/1/504849/100/0/threaded - http://secunia.com/advisories/34750 - http://wiki.rpath.com/Advisories:rPSA-2009-0063 - http://www.vmware.com/security/advisories/VMSA-2009-0009.html - https://bugzilla.redhat.com/show_bug.cgi?id=495051 - https://www.exploit-db.com/exploits/8572
CVE ID: CVE-2009-1186 State: PUBLISHED Published: 2009-04-17T14:00:00 Last Updated: 2024-08-07T05:04:49.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1 allows local users to cause a denial of service (service outage) via vectors that trigger a call with crafted arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/502752/100/0/threaded - http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063 - http://secunia.com/advisories/34801 - http://www.securitytracker.com/id?1022068 - http://lists.opensuse.org/opensuse-security-annou
nia.com/advisories/34801 - http://www.securitytracker.com/id?1022068 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html - https://bugzilla.redhat.com/show_bug.cgi?id=495052 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.html - http://www.debian.org/security/2009/dsa-1772 - http://www.gentoo.org/security/en/glsa/glsa-200904-18.xml - https://launchpad.net/bugs/cve/2009-1186 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:103 - http://secunia.com/advisories/34776 - http://secunia.com/advisories/34731 - http://secunia.com/adviso
e=MDVSA-2009:103 - http://secunia.com/advisories/34776 - http://secunia.com/advisories/34731 - http://secunia.com/advisories/34753 - http://secunia.com/advisories/34785 - http://secunia.com/advisories/34787 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.html - http://www.securityfocus.com/bid/34539 - http://www.vupen.com/english/advisories/2009/1053 - http://www.ubuntu.com/usn/usn-758-1 - http://secunia.com/advisories/34771 - http://secunia.com/advisories/34750 - http://wiki.rpath.com/Advisories:rPSA-2009-0063 - http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=662c3110803bd8c1aedacc36788e6fd028944314
CVE ID: CVE-2009-1187 State: PUBLISHED Published: 2009-04-23T19:11:00 Last Updated: 2024-08-07T05:04:49.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc). Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=263028#c16 - https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875 - http://secunia.com/advisories/35064 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html - htt
p://secunia.com/advisories/35064 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50184 - http://secunia.com/advisories/35618 - http://www.redhat.com/support/errata/RHSA-2009-0480.html - http://poppler.freedesktop.org/releases.html - http://www.securityfocus.com/bid/34568 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:175 - http://www.kb.cert.org/vuls/id/196617 - http://www.vupen.com/english/advisories/2010/1040 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html - http://wiki.rpath.com/Advisories:rPSA-2009-0059 - http://www.mandriva.com/security/advisories?nam
9-June/msg01291.html - http://wiki.rpath.com/Advisories:rPSA-2009-0059 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:087 - http://www.vupen.com/english/advisories/2009/1076 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10292 - http://www.securityfocus.com/archive/1/502761/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html - http://secunia.com/advisories/34746
CVE ID: CVE-2009-1188 State: PUBLISHED Published: 2009-04-23T19:11:00 Last Updated: 2024-08-07T05:04:49.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39938 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9957 - http://
advisories/39938 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9957 - http://secunia.com/advisories/37028 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html - http://bugs.gentoo.org/show_bug.cgi?id=263028#c16 - https://rhn.redhat.com/errata/RHSA-2009-1501.html - http://secunia.com/advisories/37079 - https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875 - http://secunia.com/advisories/35064 - http://www.debian.org/security/2010/dsa-2028 - http://www.debian.org/security/2010/dsa-2050 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html - https://rhn.redhat.com/errata/RHSA-2009
//lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html - https://rhn.redhat.com/errata/RHSA-2009-1512.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html - http://secunia.com/advisories/35618 - http://secunia.com/advisories/37077 - http://www.redhat.com/support/errata/RHSA-2009-0480.html - http://poppler.freedesktop.org/releases.html - https://rhn.redhat.com/errata/RHSA-2009-1503.html - http://www.securityfocus.com/bid/34568 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:175 - http://www.kb.cert.org/vuls/id/196617 - http://secunia.com/advisories/37037 - http://www.vupen.com/english/advisories/2010/1040 - http://www.vup
uls/id/196617 - http://secunia.com/advisories/37037 - http://www.vupen.com/english/advisories/2010/1040 - http://www.vupen.com/english/advisories/2010/0802 - https://rhn.redhat.com/errata/RHSA-2009-1502.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50185 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html - http://wiki.rpath.com/Advisories:rPSA-2009-0059 - http://www.vupen.com/english/advisories/2009/2928 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:087 - http://www.vupen.com/english/advisories/2010/1220 - http://www.vupen.com/english/advisories/2
ries?name=MDVSA-2010:087 - http://www.vupen.com/english/advisories/2010/1220 - http://www.vupen.com/english/advisories/2009/1076 - http://secunia.com/advisories/37053 - http://www.securityfocus.com/archive/1/502761/100/0/threaded - http://secunia.com/advisories/39327 - https://bugzilla.redhat.com/show_bug.cgi?id=495907 - https://bugzilla.redhat.com/show_bug.cgi?id=526915 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html - http://secunia.com/advisories/37043 - http://secunia.com/advisories/34746
CVE ID: CVE-2009-1189 State: PUBLISHED Published: 2009-04-27T17:43:00 Last Updated: 2024-08-07T05:04:49.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before 1.2.14 uses incorrect logic to validate a basic type, which allows remote attackers to spoof a signature via a crafted key. NOTE: this is due to an incorrect fix for CVE-2008-3834. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/04/16/13 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50385 - http://bugs.freedesktop.org/show_bug.cgi?id=17803 - http://www.
s://exchange.xforce.ibmcloud.com/vulnerabilities/50385 - http://bugs.freedesktop.org/show_bug.cgi?id=17803 - http://www.securityfocus.com/bid/31602 - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - https://usn.ubuntu.com/799-1/ - http://secunia.com/advisories/35810 - http://www.freedesktop.org/wiki/Software/dbus#head-dad0dab297a44f1d7a3b1259cfc06b583fd6a88a - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10308 - https://rhn.redhat.com/errata/RHSA-2010-0095.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://secunia.com/advisories/32127 - http://www.vupen.com/engli
juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://secunia.com/advisories/32127 - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2009-1190 State: PUBLISHED Published: 2009-04-27T22:00:00 Last Updated: 2024-08-07T05:04:49.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit (JDK) before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 through 1.0.2, allows remote attackers to cause a denial of service (CPU consumption) via serializable data with a long regex string containing multiple optional groups, a related issue to CVE-2004-2540. Additional Analyst Notes: - CVE Program Container: References: - http:
ptional groups, a related issue to CVE-2004-2540. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/502926/100/0/threaded - http://www.packetstormsecurity.org/hitb06/DAY_1_-_Marc_Schoenefeld_-_Pentesting_Java_J2EE.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/50083 - https://bugzilla.redhat.com/show_bug.cgi?id=497161 - http://www.springsource.com/securityadvisory - http://secunia.com/advisories/34892
CVE ID: CVE-2009-1191 State: PUBLISHED Published: 2009-04-23T17:00:00 Last Updated: 2024-08-07T05:04:49.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34663 - http://www.apache.org/dist/httpd/patches/apply_to_2.2.11/PR46949.diff - http://secunia.com/advisories/35395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50059 - http://www.mandriva.
http://secunia.com/advisories/35395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50059 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:102 - http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html - http://www.vupen.com/english/advisories/2009/1147 - http://security.gentoo.org/glsa/glsa-200907-04.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8261 - http://www.vupen.com/english/advisories/2009/3184 - http://osvdb.org/53921 - http://www.securitytracker.com/id?1022264 - https://issues.apache.org/bugzilla/show_bug.cgi?id=46949 - http://secunia.com/advisories/34827 - http://lists.apple.com/archives/security-
che.org/bugzilla/show_bug.cgi?id=46949 - http://secunia.com/advisories/34827 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=766938&r2=767089 - http://secunia.com/advisories/35721 - http://support.apple.com/kb/HT3937 - http://www.ubuntu.com/usn/usn-787-1 - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57