Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f3
073a8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb33be0aa9bd8cac9536293e3821dcd4cf8180ad95a8036eedd46365e%40%3Cusers.mina.apache.org%3E
CVE ID: CVE-2009-1891 State: PUBLISHED Published: 2009-07-10T15:00:00 Last Updated: 2024-08-07T05:27:54.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption). Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=apache-httpd-dev&m=124621326524824&w=2 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html - http://wiki.r
e/2009-August/msg01363.html - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0142 - http://secunia.com/advisories/35781 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK99480 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12361 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:149 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK91361 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://www.redhat.com/support/errata/RHSA-2009-1156.html - http://secunia.com/advisories/35865 - http://www.vupen.com/english/advisories/2009/1841 - http://secunia.com
1156.html - http://secunia.com/advisories/35865 - http://www.vupen.com/english/advisories/2009/1841 - http://secunia.com/advisories/37152 - http://www.securitytracker.com/id?1022529 - http://marc.info/?l=apache-httpd-dev&m=124661528519546&w=2 - http://www.debian.org/security/2009/dsa-1834 - http://www.securityfocus.com/archive/1/507857/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8632 - http://marc.info/?l=bugtraq&m=129190899612998&w=2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534712 - http://security.gentoo.org/glsa/glsa-200907-04.xml - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://wiki.rpath.com/Advisories:rPS
o.org/glsa/glsa-200907-04.xml - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://wiki.rpath.com/Advisories:rPSA-2009-0142 - https://rhn.redhat.com/errata/RHSA-2009-1148.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9248 - http://www.ubuntu.com/usn/USN-802-1 - http://secunia.com/advisories/37221 - http://www.vupen.com/english/advisories/2009/3184 - http://marc.info/?l=bugtraq&m=129190899612998&w=2 - http://secunia.com/advisories/35793 - https://bugzilla.redhat.com/show_bug.cgi?id=509125 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://secunia.com/advisories/35721 - http://support.apple.com/kb/HT3937 -
es/security-announce/2009/Nov/msg00000.html - http://secunia.com/advisories/35721 - http://support.apple.com/kb/HT3937 - http://osvdb.org/55782 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f
3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - http
sts.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f08
89e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/threa
/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2009-1892 State: PUBLISHED Published: 2009-07-17T16:00:00 Last Updated: 2024-08-07T05:27:54.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: dhcpd in ISC DHCP 3.0.4 and 3.1.1, when the dhcp-client-identifier and hardware ethernet configuration settings are both used, allows remote attackers to cause a denial of service (daemon crash) via unspecified requests. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35830 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51717 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00340.html - http://www.debian.org/security/2009/dsa-1833 - http://www.sec
ives/fedora-package-announce/2009-November/msg00340.html - http://www.debian.org/security/2009/dsa-1833 - http://www.securityfocus.com/bid/35669 - http://secunia.com/advisories/37342 - http://secunia.com/advisories/35851 - http://secunia.com/advisories/36457 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:154 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01177.html
CVE ID: CVE-2009-1893 State: PUBLISHED Published: 2009-07-17T16:00:00 Last Updated: 2024-08-07T05:27:54.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: The configtest function in the Red Hat dhcpd init script for DHCP 3.0.1 in Red Hat Enterprise Linux (RHEL) 3 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file, related to the "dhcpd -t" command. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1022554 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11597 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
l%3Aorg.mitre.oval%3Adef%3A11597 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6440 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51718 - http://www.securityfocus.com/bid/35670 - http://secunia.com/advisories/35831 - https://bugzilla.redhat.com/show_bug.cgi?id=510024 - http://www.redhat.com/support/errata/RHSA-2009-1154.html
CVE ID: CVE-2009-1894 State: PUBLISHED Published: 2009-07-17T16:00:00 Last Updated: 2024-08-07T05:27:54.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting LD_BIND_NOW to 1, and then calling execv on the target of the /proc/self/exe symlink. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35868 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:171 - http://blog.cr0.org/2009/07/old-school-local-root-vulnerability-in.html - https://exchange.xforce.ibmc
=MDVSA-2009:171 - http://blog.cr0.org/2009/07/old-school-local-root-vulnerability-in.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/51804 - http://www.akitasecurity.nl/advisory.php?id=AK20090602 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:152 - http://secunia.com/advisories/35886 - http://www.securityfocus.com/bid/35721 - https://bugzilla.redhat.com/show_bug.cgi?id=510071 - http://www.securityfocus.com/archive/1/505052/100/0/threaded - https://admin.fedoraproject.org/updates/pulseaudio-0.9.10-1.el5.2 - http://www.debian.org/security/2009/dsa-1838 - http://secunia.com/advisories/35896 - http://taviso.decsystem.org/research.html - http://security.gentoo.org/glsa/
838 - http://secunia.com/advisories/35896 - http://taviso.decsystem.org/research.html - http://security.gentoo.org/glsa/glsa-200907-13.xml - http://www.ubuntu.com/usn/usn-804-1
CVE ID: CVE-2009-1895 State: PUBLISHED Published: 2009-07-16T15:00:00 Last Updated: 2024-08-07T05:27:54.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to (1) conduct NULL pointer dereference attacks, (2) bypass the mmap_min_addr protection mechanism, or (3) defeat address space layout randomization (ASLR). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus
e layout randomization (ASLR). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512019/100/0/threaded - http://wiki.rpath.com/Advisories:rPSA-2009-0111 - http://secunia.com/advisories/36131 - http://www.osvdb.org/55807 - http://www.vupen.com/english/advisories/2009/1866 - https://rhn.redhat.com/errata/RHSA-2009-1540.html - http://secunia.com/advisories/37471 - http://secunia.com/advisories/36759 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00223.html - http://www.debian.org/security/2009/dsa-1844 - http://www.ubuntu.com/usn/usn-807-1 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.
1844 - http://www.ubuntu.com/usn/usn-807-1 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.redhat.com/support/errata/RHSA-2009-1193.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f9fabcb58a6d26d6efde842d1703ac7cfa9427b6 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7826 - http://www.securityfocus.com/bid/35647 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00166.html - http://www.securityfocus.com/archive/1/505254/100/0/threaded - http://blog.cr0.org/2009/06/bypassing-linux-null-pointer.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051
blog.cr0.org/2009/06/bypassing-linux-null-pointer.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/36051 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11768 - http://secunia.com/advisories/36045 - http://secunia.com/advisories/36116 - https://rhn.redhat.com/errata/RHSA-2009-1550.html - http://patchwork.kernel.org/patch/32598/ - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc3 - http://secunia.com/advisories/35801 - http://secunia.com/advisories/36054 - https://bugs.launchpad.net/bugs/cve/2009-1895 - http://www.
com/advisories/35801 - http://secunia.com/advisories/36054 - https://bugs.launchpad.net/bugs/cve/2009-1895 - http://www.debian.org/security/2009/dsa-1845 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9453 - http://www.redhat.com/support/errata/RHSA-2009-1438.html - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-1896 State: PUBLISHED Published: 2009-08-10T18:00:00 Last Updated: 2024-08-07T05:27:54.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Web Start framework in IcedTea in OpenJDK before 1.6.0.0-20.b16.fc10 on Fedora 10, and before 1.6.0.0-27.b16.fc11 on Fedora 11, trusts an entire application when at least one of the listed jar files is trusted, which allows context-dependent attackers to execute arbitrary code without the untrusted-code restrictions via a crafted application, related to NetX. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=512101 - http://secunia.com/advisories/36162 - http:
ontainer: References: - https://bugzilla.redhat.com/show_bug.cgi?id=512101 - http://secunia.com/advisories/36162 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:209 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html
CVE ID: CVE-2009-1897 State: PUBLISHED Published: 2009-07-20T17:00:00 Last Updated: 2024-08-07T05:27:54.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tun_chr_poll function in drivers/net/tun.c in the tun subsystem in the Linux kernel 2.6.30 and 2.6.30.1, when the -fno-delete-null-pointer-checks gcc option is omitted, allows local users to gain privileges via vectors involving a NULL pointer dereference and an mmap of /dev/net/tun, a different vulnerability than CVE-2009-1894. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1925 - http://isc.sans.org/diary.html?storyid=6820 - http://grsecurity.net/~spender/che
upen.com/english/advisories/2009/1925 - http://isc.sans.org/diary.html?storyid=6820 - http://grsecurity.net/~spender/cheddar_bay.tgz - http://www.openwall.com/lists/oss-security/2009/07/17/1 - http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0246.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/51803 - http://article.gmane.org/gmane.linux.network/124939 - http://secunia.com/advisories/35839 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3c8a9c63d5fd738c261bd0ceece04d9c8357ca13 - https://bugzilla.redhat.com/show_bug.cgi?id=512284 - http://lkml.org/lkml/2009/7/6/19 - http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0241.ht
cgi?id=512284 - http://lkml.org/lkml/2009/7/6/19 - http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0241.html - https://www.redhat.com/en/blog/security-flaws-caused-compiler-optimizations
CVE ID: CVE-2009-1898 State: PUBLISHED Published: 2009-06-03T16:33:00 Last Updated: 2024-08-07T05:27:54.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: The secure login page in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 does not redirect to an https page upon receiving an http request, which makes it easier for remote attackers to read the contents of WAS sessions by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51170 - http://www.securityfocus.com/bid/35405 - http://www-01.ibm.com/support
hange.xforce.ibmcloud.com/vulnerabilities/51170 - http://www.securityfocus.com/bid/35405 - http://www-01.ibm.com/support/docview.wss?uid=swg27006876 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK77010 - http://www.vupen.com/english/advisories/2009/1464
CVE ID: CVE-2009-1899 State: PUBLISHED Published: 2009-06-03T16:33:00 Last Updated: 2024-08-07T05:27:54.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Administrative Configservice API in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5 on z/OS allows remote authenticated users to obtain sensitive information via unknown use of the wsadmin scripting tool, related to a "security exposure in wsadmin." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52075 - http://secunia.com/
- CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52075 - http://secunia.com/advisories/35301 - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK77495 - http://www.securityfocus.com/bid/35405 - http://www-01.ibm.com/support/docview.wss?uid=swg27006876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51172 - http://www.vupen.com/english/advisories/2009/1464 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2009-1900 State: PUBLISHED Published: 2009-06-03T16:33:00 Last Updated: 2024-08-07T05:27:54.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Configservice APIs in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5, when tracing is enabled, allow remote attackers to obtain sensitive information via unspecified use of the wsadmin scripting tool. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35301 - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51171 - http
//www-01.ibm.com/support/docview.wss?uid=swg27007951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51171 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK84999 - http://www.securityfocus.com/bid/35405 - http://www-01.ibm.com/support/docview.wss?uid=swg27006876 - http://www.vupen.com/english/advisories/2009/1464 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52077
CVE ID: CVE-2009-1901 State: PUBLISHED Published: 2009-06-03T16:33:00 Last Updated: 2024-08-07T05:27:54.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 permits "non-standard http methods," which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51173 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK73246 - http://www.securityfocus.com/bid/35405 - http://www-01.ibm.com/support/docview.wss?uid=swg27006876 - http://www.vupen.com/english/advisories/2009/1464
CVE ID: CVE-2009-1902 State: PUBLISHED Published: 2009-06-03T16:33:00 Last Updated: 2024-08-07T05:27:54.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service (crash) via a multipart form datapost request with a missing part header name, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00487.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49212 - https://www.exploit-db.com/exploits/8241 - http://security.gentoo.org/glsa/glsa-200907-02.xml -
vulnerabilities/49212 - https://www.exploit-db.com/exploits/8241 - http://security.gentoo.org/glsa/glsa-200907-02.xml - http://secunia.com/advisories/34256 - http://secunia.com/advisories/35687 - http://www.osvdb.org/52553 - http://secunia.com/advisories/34311 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00529.html - http://sourceforge.net/project/shownotes.php?release_id=667542&group_id=68846 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://www.securityfocus.com/archive/1/501968 - http://www.vupen.com/english/advisories/2009/0703 - http://www.securityfocus.com/bid/34096
CVE ID: CVE-2009-1903 State: PUBLISHED Published: 2009-06-03T16:33:00 Last Updated: 2024-08-07T05:27:54.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PDF XSS protection feature in ModSecurity before 2.5.8 allows remote attackers to cause a denial of service (Apache httpd crash) via a request for a PDF file that does not use the GET method. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00487.html - http://www.osvdb.org/52552 - http://security.gentoo.org/glsa/glsa-200907-02.xml - http://secunia.com/advisories/34256 - http://secunia.com/advisories/35687 - http://secunia.com/advisories/
0907-02.xml - http://secunia.com/advisories/34256 - http://secunia.com/advisories/35687 - http://secunia.com/advisories/34311 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00529.html - http://sourceforge.net/project/shownotes.php?release_id=667538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49211 - http://www.vupen.com/english/advisories/2009/0703 - http://www.securityfocus.com/bid/34096
CVE ID: CVE-2009-1904 State: PUBLISHED Published: 2009-06-11T21:00:00 Last Updated: 2024-08-07T05:27:54.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a denial of service (application crash) via a string argument that represents a large number, as demonstrated by an attempted conversion to the Float data type. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1563 - http://secunia.com/advisories/35937 - http://secunia.com/advisories/35593 - http://www.ruby-lang.org/en/news/2009/06/09/dos-vulnerability-i