Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-5008 State: PUBLISHED Published: 2010-10-12T21:00:00Z Last Updated: 2024-09-16T22:57:06.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Desktop (CSD), when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verification, which allows local users to bypass intended policy restrictions via a modified executable file. Additional Analyst Notes: - CVE Program Container: References: - http://www.infradead.org/openconnect.html
CVE ID: CVE-2009-5009 State: PUBLISHED Published: 2010-10-12T21:00:00Z Last Updated: 2024-09-17T02:42:41.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.infradead.org/openconnect.html
CVE ID: CVE-2009-5010 State: PUBLISHED Published: 2010-10-19T19:00:00Z Last Updated: 2024-09-16T16:59:08.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.1 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, a different vulnerability than CVE-2010-3494. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/11/2 - http://code.google.com/p/pyftpdlib/issues/detail?id=91 - http://code.google
enwall.com/lists/oss-security/2010/09/11/2 - http://code.google.com/p/pyftpdlib/issues/detail?id=91 - http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY - https://bugs.launchpad.net/zodb/+bug/135108 - http://code.google.com/p/pyftpdlib/source/detail?r=439 - http://www.openwall.com/lists/oss-security/2010/09/24/3 - http://www.openwall.com/lists/oss-security/2010/09/22/3 - http://bugs.python.org/issue6706 - http://www.openwall.com/lists/oss-security/2010/09/09/6 - http://code.google.com/p/pyftpdlib/source/diff?spec=svn439&r=439&format=side&path=/trunk/pyftpdlib/ftpserver.py
CVE ID: CVE-2009-5011 State: PUBLISHED Published: 2010-10-19T19:00:00Z Last Updated: 2024-09-17T02:42:48.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the getpeername function having an ENOTCONN error, a different vulnerability than CVE-2010-3494. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY - http://code.google.com/p/pyftpdlib/issues/detail?id=100 - http://code.google.com
pyftpdlib/source/browse/trunk/HISTORY - http://code.google.com/p/pyftpdlib/issues/detail?id=100 - http://code.google.com/p/pyftpdlib/source/detail?r=543 - http://code.google.com/p/pyftpdlib/source/diff?spec=svn543&r=543&format=side&path=/trunk/pyftpdlib/ftpserver.py
CVE ID: CVE-2009-5012 State: PUBLISHED Published: 2010-10-19T19:00:00Z Last Updated: 2024-09-17T01:55:56.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY - http://code.google.com/p/pyftpdlib/source/detail?r=596 - http://code.google.com/p/pyftpdlib/source/diff?spec=svn596&r=596&format=side&path=/trunk/pyftpdlib/ftpserver.py - http://c
tp://code.google.com/p/pyftpdlib/source/diff?spec=svn596&r=596&format=side&path=/trunk/pyftpdlib/ftpserver.py - http://code.google.com/p/pyftpdlib/issues/detail?id=114
CVE ID: CVE-2009-5013 State: PUBLISHED Published: 2010-10-19T19:00:00Z Last Updated: 2024-09-17T03:48:47.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of service (memory consumption) by sending a QUIT command during a data transfer. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/pyftpdlib/source/diff?spec=svn615&r=615&format=side&path=/trunk/pyftpdlib/ftpserver.py - http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY - http://code.google.com/p/pyftpdlib/issues/detail?id=119 - http://code.
gle.com/p/pyftpdlib/source/browse/trunk/HISTORY - http://code.google.com/p/pyftpdlib/issues/detail?id=119 - http://code.google.com/p/pyftpdlib/source/detail?r=615
CVE ID: CVE-2009-5014 State: PUBLISHED Published: 2010-11-05T22:00:00Z Last Updated: 2024-09-16T22:25:19.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default quickstart configuration of TurboGears2 (aka tg2) before 2.0.2 has a weak cookie salt, which makes it easier for remote attackers to bypass repoze.who authentication via a forged authorization cookie, a related issue to CVE-2010-3852. Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/group/turbogears-announce/msg/09ec26696b1761bb?dmode=source&output=gplain
CVE ID: CVE-2009-5015 State: PUBLISHED Published: 2010-11-05T22:00:00Z Last Updated: 2024-09-17T02:37:16.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: The URL dispatch mechanism in TurboGears2 (aka tg2) before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/group/turbogears-announce/msg/09ec26696b1761bb?dmode=source&output=gplain
CVE ID: CVE-2009-5016 State: PUBLISHED Published: 2010-11-12T21:00:00 Last Updated: 2024-08-07T07:24:54.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different vulnerability than CVE-2010-3870. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0077 - http://www.securityfocus.com/bid/44889 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/
/0077 - http://www.securityfocus.com/bid/44889 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html - http://secunia.com/advisories/42812 - http://www.redhat.com/support/errata/RHSA-2011-0195.html - http://bugs.php.net/bug.php?id=49687 - http://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf - http://www.ubuntu.com/usn/USN-1042-1 - http://www.redhat.com/support/errata/RHSA-2010-0919.html - http://www.vupen.com/english/advisories/2011/0021 - http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html - http://secunia.com/advisories/42410 - http://lists.fedoraproject.org/pipermail/package-announce/20
ues-on-php-and.html - http://secunia.com/advisories/42410 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html - http://www.vupen.com/english/advisories/2011/0020 - http://www.vupen.com/english/advisories/2010/3081
CVE ID: CVE-2009-5017 State: PUBLISHED Published: 2010-11-12T21:00:00Z Last Updated: 2024-09-16T17:44:04.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=511859 - https://bugzilla.mozilla.org/show_bug.cgi?id=522634 - http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html - http://hg.mozilla.org
cgi?id=522634 - http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html - http://hg.mozilla.org/releases/mozilla-1.9.2/rev/e42c563313a0
CVE ID: CVE-2009-5018 State: PUBLISHED Published: 2011-01-14T16:00:00 Last Updated: 2024-08-07T07:24:54.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to execute arbitrary code via a long command-line argument, as demonstrated by a CGI program that launches gif2png. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=547515 - http://openwall.com/lists/oss-security/2010/11/22/12 - http://www.vupen.com/english/advisories/2011/0023 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:009 - http://openwall
pen.com/english/advisories/2011/0023 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:009 - http://openwall.com/lists/oss-security/2010/11/22/3 - http://secunia.com/advisories/42796 - http://bugs.gentoo.org/show_bug.cgi?id=346501 - http://cvs.fedoraproject.org/viewvc/rpms/gif2png/devel/gif2png-overflow.patch?root=extras&view=log - http://www.securityfocus.com/bid/41801 - http://www.vupen.com/english/advisories/2010/3036 - http://openwall.com/lists/oss-security/2010/11/21/1 - http://www.vupen.com/english/advisories/2011/0107 - http://security.gentoo.org/glsa/glsa-201101-01.xml - http://openwall.com/lists/oss-security/2010/11/22/1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug
a-201101-01.xml - http://openwall.com/lists/oss-security/2010/11/22/1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550978 - http://lists.grok.org.uk/pipermail/full-disclosure/2009-December/072009.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64820 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051229.html
CVE ID: CVE-2009-5019 State: PUBLISHED Published: 2010-12-01T16:00:00 Last Updated: 2024-08-07T07:24:54.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55043 - http://packetstormsecurity.org/files/view/84294/webwiznewspad-disclose.txt - http://www.exploit-db.com/exploits/15544 - http://www.exploit-db.com/exploits/10637
CVE ID: CVE-2009-5020 State: PUBLISHED Published: 2010-12-02T16:00:00Z Last Updated: 2024-09-16T18:04:20.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://awstats.sourceforge.net/docs/awstats_changelog.txt
CVE ID: CVE-2009-5021 State: PUBLISHED Published: 2010-12-09T19:00:00 Last Updated: 2024-08-07T07:24:53.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cobbler before 1.6.1 does not properly determine whether an installation has the default password, which makes it easier for attackers to obtain access by using this password. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64734 - http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gz
CVE ID: CVE-2009-5022 State: PUBLISHED Published: 2011-05-03T20:00:00 Last Updated: 2024-08-07T07:24:53.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in tif_ojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execute arbitrary code via a crafted TIFF file. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/04/12/10 - http://www.debian.org/security/2011/dsa-2256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66774 - http://secunia.com/advisories/44271 - http://bugzilla.maptools.org/show_bug.cgi?id=1999 - https://bugzilla.redhat.com/show_bug.cgi?id=695885 -
isories/44271 - http://bugzilla.maptools.org/show_bug.cgi?id=1999 - https://bugzilla.redhat.com/show_bug.cgi?id=695885 - http://securitytracker.com/id?1025380 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:078 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058478.html - http://www.vupen.com/english/advisories/2011/1014 - http://www.remotesensing.org/libtiff/v3.9.5.html - http://www.vupen.com/english/advisories/2011/1082 - http://www.securityfocus.com/bid/47338 - http://www.ubuntu.com/usn/USN-1120-1 - http://www.redhat.com/support/errata/RHSA-2011-0452.html - http://secunia.com/advisories/50726
CVE ID: CVE-2009-5023 State: PUBLISHED Published: 2014-06-10T14:00:00 Last Updated: 2024-08-07T07:24:54.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4) mynetwatchman.conf actions in action.d/ in Fail2ban before 0.8.5 allows local users to write to arbitrary files via a symlink attack on temporary files with predictable names, as demonstrated by /tmp/fail2ban-mail.txt. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fail2ban/fail2ban/blob/sdist/0.8.5/ChangeLog - http://security.gentoo.org/glsa/glsa-201406-03.xml - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=5
8.5/ChangeLog - http://security.gentoo.org/glsa/glsa-201406-03.xml - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=544232 - http://secunia.com/advisories/58841
CVE ID: CVE-2009-5024 State: PUBLISHED Published: 2011-05-23T22:00:00 Last Updated: 2024-08-07T07:24:53.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: ViewVC before 1.1.11 allows remote attackers to bypass the cvsdb row_limit configuration setting, and consequently conduct resource-consumption attacks, via the limit parameter, as demonstrated by a "query revision history" request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47928 - http://openwall.com/lists/oss-security/2011/05/19/9 - http://viewvc.tigris.org/issues/show_bug.cgi?id=433 - http://viewvc.tigris.org/source/browse/viewvc/trunk/lib/viewvc.py?diff_format=u&r1=25
s.org/issues/show_bug.cgi?id=433 - http://viewvc.tigris.org/source/browse/viewvc/trunk/lib/viewvc.py?diff_format=u&r1=2547&r2=2546&pathrev=2547 - http://openwall.com/lists/oss-security/2011/05/19/1 - http://www.debian.org/security/2012/dsa-2563 - http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.1.11/CHANGES - http://viewvc.tigris.org/source/browse/viewvc/trunk/lib/cvsdb.py?diff_format=u&view=log#rev2547
CVE ID: CVE-2009-5025 State: PUBLISHED Published: 2020-01-15T20:15:34 Last Updated: 2024-08-07T07:24:53.774Z Vendors: PyForum Products: PyForum Problem Types: Other Description: A backdoor (aka BMSA-2009-07) was found in PyForum v1.0.3 where an attacker who knows a valid user email could force a password reset on behalf of that user. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/cve/CVE-2009-5025 - https://www.openwall.com/lists/oss-security/2011/07/26/7 - https://seclists.org/fulldisclosure/2009/Nov/353
CVE ID: CVE-2009-5026 State: PUBLISHED Published: 2012-08-17T00:00:00 Last Updated: 2024-08-07T07:24:53.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running a newer version than the master, allows remote attackers to execute arbitrary SQL commands via custom comments. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=640177 - http://dev.mysql.com/doc/refman/5.0/en/news-5-0-93.html - http://bugs.mysql.com/bug.php?id=49124 - http://lists.opensuse.org/opensuse-security
oc/refman/5.0/en/news-5-0-93.html - http://bugs.mysql.com/bug.php?id=49124 - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00007.html - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-50.html - http://seclists.org/oss-sec/2011/q4/101 - http://secunia.com/advisories/49179
CVE ID: CVE-2009-5027 State: REJECTED Published: 2014-12-26T20:00:00 Last Updated: 2014-12-26T19:57:00 Description: No description available.
CVE ID: CVE-2009-5028 State: PUBLISHED Published: 2011-11-30T02:00:00 Last Updated: 2024-08-07T07:24:53.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Namazu before 2.0.20 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted request containing an empty uri field. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.namazu.org/namazu/src/result.c?sortdir=down&r1=1.59.8.28&r2=1.59.8.29&sortby=log - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - http://www.securityfocus.com/bid/50772 - https://bugzilla.redhat.com/show_
public/kb/docDisplay?docId=emr_na-c05385680 - http://www.securityfocus.com/bid/50772 - https://bugzilla.redhat.com/show_bug.cgi?id=756341 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://cvs.namazu.org/namazu/src/result.c?sortdir=down&r1=1.77.2.8&r2=1.77.2.9&sortby=log - http://cvs.namazu.org/namazu/src/result.c?sortdir=down&r1=1.86&r2=1.87&sortby=log - http://www.namazu.org/security.html
CVE ID: CVE-2009-5029 State: PUBLISHED Published: 2013-05-02T14:00:00Z Last Updated: 2024-08-07T07:24:53.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted timezone (TZ) file, as demonstrated using vsftpd. Additional Analyst Notes: - CVE Program Container: References: - http://sourceware.org/ml/libc-alpha/2011-12/msg00037.html - http://dividead.wordpress.com/2009/06/01/glibc-timezone-integer-overflow/ - http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=97ac2654b2d831acaa18a2b018b073624590
-timezone-integer-overflow/ - http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=97ac2654b2d831acaa18a2b018b0736245903fd2 - http://lists.grok.org.uk/pipermail/full-disclosure/2011-December/084452.html - https://bugzilla.redhat.com/show_bug.cgi?id=761245
CVE ID: CVE-2009-5030 State: PUBLISHED Published: 2012-07-18T22:00:00 Last Updated: 2024-08-07T07:24:54.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image, which causes insufficient memory to be allocated and leads to an "invalid free." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48781 - http://rhn.redhat.com/errata/RHSA-2012-1068.html - https://groups.google.com/forum/#%21topic/openjpeg/DLVrRKbTeI0/discus
http://rhn.redhat.com/errata/RHSA-2012-1068.html - https://groups.google.com/forum/#%21topic/openjpeg/DLVrRKbTeI0/discussion - http://code.google.com/p/openjpeg/source/detail?r=1703 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/083105.html - http://secunia.com/advisories/49913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74851 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:104 - http://www.openwall.com/lists/oss-security/2012/04/13/5 - http://www.securityfocus.com/bid/53012 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082923.html - http://code.google.com/p/openjpeg/issues/detail?id=5
CVE ID: CVE-2009-5031 State: PUBLISHED Published: 2012-07-22T16:00:00 Last Updated: 2024-08-07T07:24:53.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: ModSecurity before 2.5.11 treats request parameter values containing single quotes as files, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks via a single quote in a request parameter in the Content-Disposition field of a request with a multipart/form-data Content-Type header. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-08/msg00031.html - http://www.securityfocus.com/bid/54156 - http:
ces: - http://lists.opensuse.org/opensuse-updates/2013-08/msg00031.html - http://www.securityfocus.com/bid/54156 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00020.html - http://www.suspekt.org/downloads/POC2009-ShockingNewsInPHPExploitation.pdf - http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/branches/2.6.x/CHANGES - http://blog.ivanristic.com/2012/06/modsecurity-and-modsecurity-core-rule-set-multipart-bypasses.html - http://www.openwall.com/lists/oss-security/2012/06/22/2 - http://www.openwall.com/lists/oss-security/2012/06/22/1 - http://secunia.com/advisories/49576 - https://www.modsecurity.org/fisheye/browse/modsecurity/m2/branches/2.5.x/apache2/msc_multipart.c
.com/advisories/49576 - https://www.modsecurity.org/fisheye/browse/modsecurity/m2/branches/2.5.x/apache2/msc_multipart.c?r2=1419&r1=1366 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00025.html
CVE ID: CVE-2009-5032 State: PUBLISHED Published: 2010-12-16T19:45:00 Last Updated: 2024-08-07T07:24:53.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: The encrypted e-mail feature in IBM Lotus Notes Traveler before 8.5.0.2 sends unencrypted messages when the feature is used without uploading a Notes ID file, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466&action=openDocument - https://exchange.xforce.ibmcloud.com/vulnerabilities/64743 - http://www-1.ibm.com/support/
05D4466&action=openDocument - https://exchange.xforce.ibmcloud.com/vulnerabilities/64743 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO38116 - http://www-01.ibm.com/support/docview.wss?uid=swg24019529&aid=1
CVE ID: CVE-2009-5033 State: PUBLISHED Published: 2010-12-16T19:45:00 Last Updated: 2024-08-07T07:24:53.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle a "* *" argument sequence for a certain tell command, which allows remote authenticated users to obtain access to other users' data via a sync operation, related to storage of the data of multiple users within the same thread. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64742 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO41040 - http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?doc
742 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO41040 - http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466&action=openDocument - http://www-01.ibm.com/support/docview.wss?uid=swg24019529&aid=1