Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0894 State: PUBLISHED Published: 2009-06-02T18:00:00Z Last Updated: 2024-09-16T23:42:26.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the decoder_create function in the initialization functionality in xvidcore/src/decoder.c in Xvid before 1.2.2, as used by Windows Media Player and other applications, allows remote attackers to execute arbitrary code via vectors involving the DirectShow (aka DShow) frontend and improper handling of the XVID_ERR_MEMORY return code during processing of a crafted movie file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: Ref
some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c - http://www.securityfocus.com/bid/35158 - http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c?r1=1.80&r2=1.81 - http://www.xvid.org/News.64.0.html?&cHash=0170b4e439&tx_ttnews%5BbackPid%5D=64&tx_ttnews%5Btt_news%5D=7 - https://www.it-isac.org/postings/cyber/alertdetail.php?id=4635&selyear=2009&menutype=menupublic
CVE ID: CVE-2009-0895 State: PUBLISHED Published: 2009-12-03T17:00:00 Last Updated: 2024-08-07T04:48:52.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3379 - http://www.securityfocus.com/bid/37184 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50616 - http://www.iss.net/threats/356.html - http://secunia.com/advisorie
/exchange.xforce.ibmcloud.com/vulnerabilities/50616 - http://www.iss.net/threats/356.html - http://secunia.com/advisories/37554 - http://www.novell.com/support/viewContent.do?externalId=7004912 - https://bugzilla.novell.com/show_bug.cgi?id=524344 - https://bugzilla.novell.com/show_bug.cgi?id=545887
CVE ID: CVE-2009-0896 State: PUBLISHED Published: 2009-06-03T16:33:00 Last Updated: 2024-08-07T04:48:52.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the queue manager in IBM WebSphere MQ 6.x before 6.0.2.7 and 7.x before 7.0.1.0 allows remote attackers to execute arbitrary code via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50641 - http://www.vupen.com/english/advisories/2009/1463 - http://securitytracker.com/id?1022311 - http://www-01.ibm.com/support/docview.wss?uid=swg21386826 - http://secunia.com/advisories/35303 - htt
r.com/id?1022311 - http://www-01.ibm.com/support/docview.wss?uid=swg21386826 - http://secunia.com/advisories/35303 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ50784
CVE ID: CVE-2009-0897 State: PUBLISHED Published: 2009-05-21T15:00:00 Last Updated: 2024-08-07T04:48:52.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Partner Gateway (WPG) 6.1.0 before 6.1.0.1 and 6.1.1 before 6.1.1.1 allows remote authenticated users to obtain sensitive information via vectors related to the "schema DB2 instance id" and the bcgarchive (aka the archiver script). Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21366016 - http://www.securityfocus.com/bid/35136 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50643
CVE ID: CVE-2009-0898 State: PUBLISHED Published: 2009-12-10T23:00:00 Last Updated: 2024-08-07T04:48:52.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37294 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - http://www.securityfocus.com/bid/37261 - http://marc.info/?l=bugtraq&m=126046355120442&w=2 - http://www.iss.net/threats/357.html - http://h20000.www2.hp.com/bizsupport/Tec
c.info/?l=bugtraq&m=126046355120442&w=2 - http://www.iss.net/threats/357.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877
CVE ID: CVE-2009-0899 State: PUBLISHED Published: 2009-06-03T16:33:00 Last Updated: 2024-08-07T04:48:52.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM WebSphere Portal Server 5.1 through 6.0, and IBM Integrated Solutions Console (ISC) 6.0.1 do not properly set the IsSecurityEnabled security flag during migration of WebSphere Member Manager (WMM) to Virtual Member Manager (VMM) and a Federated Repository, which allows attackers to obtain sensitive information from repositories via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocu
tories via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35406 - http://www-01.ibm.com/support/docview.wss?uid=swg21375859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50882 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK78134
CVE ID: CVE-2009-0900 State: PUBLISHED Published: 2011-10-30T19:00:00 Last Updated: 2024-08-07T04:48:52.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the client in IBM WebSphere MQ 6.0 before 6.0.2.7 and 7.0 before 7.0.1.0 allows local users to gain privileges via crafted SSL information in a Client Channel Definition Table (CCDT) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1IC59375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51038
CVE ID: CVE-2009-0901 State: PUBLISHED Published: 2009-07-29T17:00:00 Last Updated: 2024-08-07T04:48:52.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not prevent VariantClear calls on an uninitialized VARIANT, which allows remote attackers to execute arbitrary code via a malformed stream to an ATL (1) component or (2) control, related to ATL headers and error handling, aka "ATL Uninitialized Object Vul
eam to an ATL (1) component or (2) control, related to ATL headers and error handling, aka "ATL Uninitialized Object Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb09-11.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1 - http://www.securityfocus.com/bid/35832 - http://www.vupen.com/english/advisories/2009/2034 - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - http://www.adobe.com/support/security/bulletins/apsb09-13.html - http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://docs.microsoft.co
ntent.do?externalId=7004997&sliceId=1 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035 - http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7581 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6289 - http://marc.info/?l=bugtraq&m=126592505426855&w=2 - http://marc.info/?l=bugtraq&m=126592505426855&w=2 - http://secunia.com/advisories/36187 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%
- http://secunia.com/advisories/36187 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6311 - http://www.vupen.com/english/advisories/2009/2232 - http://www.adobe.com/support/security/bulletins/apsb09-10.html - http://secunia.com/advisories/36374 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037 - http://www.adobe.com/support/security/advisories/apsa09-04.html - http://secunia.com/advisories/36746 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6373 - http://secunia.com/advisories/35967 - http://www.us-cert.gov/cas/techalerts/TA09-195A.html - https://docs.microsoft.com/en-us/se
ecunia.com/advisories/35967 - http://www.us-cert.gov/cas/techalerts/TA09-195A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060
CVE ID: CVE-2009-0903 State: PUBLISHED Published: 2009-06-24T22:00:00 Last Updated: 2024-08-07T04:57:16.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3, and the Feature Pack for Web Services for WAS 6.1 before 6.1.0.25, when a WS-Security policy is established at the operation level, does not properly handle inbound requests that lack a SOAPAction or WS-Addressing Action, which allows remote attackers to bypass intended access restrictions via a crafted request to a JAX-WS application. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1PK87767 - http://www.
yst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1PK87767 - http://www.securityfocus.com/bid/35594 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK72138 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK81944 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51293
CVE ID: CVE-2009-0904 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T04:57:16.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBM Stax XMLStreamWriter in the Web Services component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 does not properly process XML encoding, which allows remote attackers to bypass intended access restrictions and possibly modify data via "XML fuzzing attacks" sent through SOAP requests. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51490 - http://www.securityfocus.com/bid/3574
wss?uid=swg27007951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51490 - http://www.securityfocus.com/bid/35741 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK84015
CVE ID: CVE-2009-0905 State: PUBLISHED Published: 2011-10-30T19:00:00 Last Updated: 2024-08-07T04:57:16.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere MQ 6.0 before 6.0.2.8 and 7.0 before 7.0.1.0 does not properly handle long group names, which might allow local users to gain privileges by leveraging combinations of group names with the same initial substring. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51042 - http://www.ibm.com/support/docview.wss?uid=swg1IZ37102
CVE ID: CVE-2009-0906 State: PUBLISHED Published: 2009-08-13T18:00:00 Last Updated: 2024-08-07T04:57:16.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Service Component Architecture (SCA) feature pack for IBM WebSphere Application Server (WAS) SCA 1.0 before 1.0.0.3 allows remote authenticated users to bypass intended authentication.transport access restrictions and obtain unspecified access via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52074 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK86047 - http://secunia.com/advisories/36306 - http://www-01.ibm.com/support/docview.ws
com/support/docview.wss?uid=swg1PK86047 - http://secunia.com/advisories/36306 - http://www-01.ibm.com/support/docview.wss?uid=swg27015429
CVE ID: CVE-2009-0907 State: REJECTED Published: 2009-08-13T18:00:00Z Last Updated: 2024-09-17T02:52:27.610Z Description: No description available.
CVE ID: CVE-2009-0908 State: PUBLISHED Published: 2009-04-06T15:00:00 Last Updated: 2024-08-07T04:57:16.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the ACE shared folders implementation in the VMware Host Guest File System (HGFS) shared folders feature in VMware ACE 2.5.1 and earlier allows attackers to enable a disabled shared folder. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2009/Apr/0036.html - http://www.securityfocus.com/bid/34373 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6399 - http://www.securitytracker.com/id?1021975 - http://www.vu
ository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6399 - http://www.securitytracker.com/id?1021975 - http://www.vupen.com/english/advisories/2009/0944 - http://lists.vmware.com/pipermail/security-announce/2009/000054.html - http://www.vmware.com/security/advisories/VMSA-2009-0005.html
CVE ID: CVE-2009-0909 State: PUBLISHED Published: 2009-04-06T15:00:00 Last Updated: 2024-08-07T04:57:16.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VMware ACE 2.5.x before 2.5.2 build 156735, and VMware Server 2.0.x before 2.0.1 build 156745 allows remote attackers to execute arbitrary code via a crafted web page or video file, aka ZDI-CAN-435. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://seclists.org/fulldisclosure/2009/Apr/0036.html - http://www.s
ttp://security.gentoo.org/glsa/glsa-201209-25.xml - http://seclists.org/fulldisclosure/2009/Apr/0036.html - http://www.securityfocus.com/bid/34373 - http://www.vupen.com/english/advisories/2009/0944 - http://lists.vmware.com/pipermail/security-announce/2009/000054.html - http://www.vmware.com/security/advisories/VMSA-2009-0005.html - http://www.securitytracker.com/id?1021974 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6251
CVE ID: CVE-2009-0910 State: PUBLISHED Published: 2009-04-06T15:00:00 Last Updated: 2024-08-07T04:57:16.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VMware ACE 2.5.x before 2.5.2 build 156735, and VMware Server 2.0.x before 2.0.1 build 156745 allows remote attackers to execute arbitrary code via a crafted web page or video file, aka ZDI-CAN-436. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://seclists.org/fulldisclosure/2009/Apr/0036.html - http://www.s
ttp://security.gentoo.org/glsa/glsa-201209-25.xml - http://seclists.org/fulldisclosure/2009/Apr/0036.html - http://www.securityfocus.com/bid/34373 - http://www.vupen.com/english/advisories/2009/0944 - http://lists.vmware.com/pipermail/security-announce/2009/000054.html - http://www.vmware.com/security/advisories/VMSA-2009-0005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5786 - http://www.securitytracker.com/id?1021974
CVE ID: CVE-2009-0912 State: PUBLISHED Published: 2009-03-16T17:00:00 Last Updated: 2024-08-07T04:57:16.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files, which allows attackers to gain privileges via "special characters" in unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49220 - http://www.securityfocus.com/bid/34089 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:072 - http://www.vupen.com/english/
ityfocus.com/bid/34089 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:072 - http://www.vupen.com/english/advisories/2009/0688
CVE ID: CVE-2009-0913 State: PUBLISHED Published: 2009-03-16T17:00:00 Last Updated: 2024-08-07T04:57:16.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the keysock kernel module in Solaris 10 and OpenSolaris builds snv_01 through snv_108 allows local users to cause a denial of service (system panic) via unknown vectors related to PF_KEY socket, probably related to setting socket options. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34277 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253568-1 - http://support.avaya.com/elmodocs2/security/ASA-2009-099.htm - http://www.securityfocus.com/b
o?assetkey=1-66-253568-1 - http://support.avaya.com/elmodocs2/security/ASA-2009-099.htm - http://www.securityfocus.com/bid/34118 - http://www.securitytracker.com/id?1021846 - http://osvdb.org/52678 - http://secunia.com/advisories/34456 - http://www.vupen.com/english/advisories/2009/0717 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6203 - http://www.vupen.com/english/advisories/2009/0817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49247
CVE ID: CVE-2009-0914 State: PUBLISHED Published: 2009-03-16T19:00:00 Last Updated: 2024-08-07T04:57:16.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5955 - http://secunia.com/advisories/34135 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6230 - http://www.opera.com/docs/changelogs/s
.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6230 - http://www.opera.com/docs/changelogs/solaris/964/ - http://www.opera.com/support/kb/view/926/ - http://www.opera.com/docs/changelogs/linux/964/ - http://secunia.com/advisories/34418 - http://www.opera.com/docs/changelogs/mac/964/ - http://www.securityfocus.com/bid/33961 - http://www.vupen.com/english/advisories/2009/0586 - https://bugs.gentoo.org/show_bug.cgi?id=261032 - http://securitytracker.com/id?1021782 - http://www.opera.com/docs/changelogs/windows/964/ - http://secunia.com/advisories/34294 - http://www.opera.com/docs/changelogs/freebsd/964/ - http://www.openwall.com/lists/oss-security/2009/03/07/1 - http
294 - http://www.opera.com/docs/changelogs/freebsd/964/ - http://www.openwall.com/lists/oss-security/2009/03/07/1 - http://security.gentoo.org/glsa/glsa-200903-30.xml
CVE ID: CVE-2009-0915 State: PUBLISHED Published: 2009-03-16T19:00:00 Last Updated: 2024-08-07T04:57:16.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via unspecified vectors related to plug-ins. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://secunia.com/advisories/34135 - http://www.opera.com/docs/changelogs/solaris/964/ - http://www.opera.com/docs/changelogs/linux/964/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6220 - http://secunia.com/advisori
ttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6220 - http://secunia.com/advisories/34418 - http://www.opera.com/docs/changelogs/mac/964/ - http://www.securityfocus.com/bid/33961 - http://www.vupen.com/english/advisories/2009/0586 - http://www.opera.com/docs/changelogs/windows/964/ - http://www.opera.com/docs/changelogs/freebsd/964/
CVE ID: CVE-2009-0916 State: PUBLISHED Published: 2009-03-16T19:00:00 Last Updated: 2024-08-07T04:57:16.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to a "moderately severe issue." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://secunia.com/advisories/34135 - http://www.opera.com/docs/changelogs/solaris/964/ - http://www.opera.com/docs/changelogs/linux/964/ - http://secunia.com/advisories/34418 - http://www.opera.com/docs/changelogs/mac/964/ - http://www.securityfocus.com/bid/33961
://secunia.com/advisories/34418 - http://www.opera.com/docs/changelogs/mac/964/ - http://www.securityfocus.com/bid/33961 - http://www.vupen.com/english/advisories/2009/0586 - http://www.opera.com/docs/changelogs/windows/964/ - http://www.opera.com/docs/changelogs/freebsd/964/
CVE ID: CVE-2009-0917 State: PUBLISHED Published: 2009-03-16T19:00:00 Last Updated: 2024-08-07T04:57:16.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DFLabs PTK 1.0.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML by providing a forensic image containing HTML documents, which are rendered in web browsers during inspection by PTK. NOTE: the vendor states that the product is intended for use in a laboratory with "no contact from / to internet." Additional Analyst Notes: - CVE Program Container: References: - http://ptk.dflabs.com/security.html - http://secunia.com/advisories/34257 - http://www.kb.cert.o
ontainer: References: - http://ptk.dflabs.com/security.html - http://secunia.com/advisories/34257 - http://www.kb.cert.org/vuls/id/845747 - http://www.securityfocus.com/bid/34111 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49236 - http://ptk.dflabs.com/faq.html - http://www.kb.cert.org/vuls/id/RGII-7Q4GBJ
CVE ID: CVE-2009-0918 State: PUBLISHED Published: 2009-03-16T19:00:00 Last Updated: 2024-08-07T04:57:16.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in DFLabs PTK 1.0.0 through 1.0.4 allow remote attackers to execute arbitrary commands in processes launched by PTK's Apache HTTP Server via (1) "external tools" or (2) a crafted forensic image. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/RGII-7Q4GBJ - http://ptk.dflabs.com/faq.html - http://www.kb.cert.org/vuls/id/845747 - http://www.securityfocus.com/bid/34111 - http://ptk.dflabs.com/security.html - https://exchange.xforce.ibmcloud.com/v
- http://www.securityfocus.com/bid/34111 - http://ptk.dflabs.com/security.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49235
CVE ID: CVE-2009-0919 State: PUBLISHED Published: 2009-03-16T19:00:00 Last Updated: 2024-08-07T04:57:16.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain access via (1) the "lampp" default password for the "nobody" account within the included ProFTPD installation, (2) a blank default password for the "root" account within the included MySQL installation, (3) a blank default password for the "pma" account within the phpMyAdmin installation, and possibly other unspecified passwords. NOTE: this was originally reported as a problem in DFLabs PTK, but this issue aff