Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0020 State: PUBLISHED Published: 2009-02-13T00:00:00 Last Updated: 2024-08-07T04:17:10.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted resource fork that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33937 - http://www.securityfocus.com/bid/33759 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.vupen.com/english/adv
/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.vupen.com/english/advisories/2009/0422
CVE ID: CVE-2009-0021 State: PUBLISHED Published: 2009-01-07T17:00:00 Last Updated: 2024-08-07T04:17:10.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3549 - http://www.securityfocus.com/archive/1/499827/100/0/threaded - http://www.securitytracker.com/id?1021533 - https://lis
- http://www.securityfocus.com/archive/1/499827/100/0/threaded - http://www.securitytracker.com/id?1021533 - https://lists.ntp.org/pipermail/announce/2009-January/000055.html - http://secunia.com/advisories/34642 - http://www.redhat.com/support/errata/RHSA-2009-0046.html - http://secunia.com/advisories/35074 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://secunia.com/advisories/33558 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html - http://www.ocert.org/advisories/ocert-2008-016.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.531177 - http://lists.opensuse.org/opensuse-security-a
urity/viewer.php?l=slackware-security&y=2009&m=slackware-security.531177 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html - http://secunia.com/advisories/33648 - http://secunia.com/advisories/33406 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10035 - http://www.vupen.com/english/advisories/2009/1297 - http://www.vupen.com/english/advisories/2009/0042
CVE ID: CVE-2009-0022 State: PUBLISHED Published: 2009-01-05T20:00:00 Last Updated: 2024-08-07T04:17:10.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root filesystem via a crafted connection request that specifies a blank share name. Additional Analyst Notes: - CVE Program Container: References: - http://master.samba.org/samba/ftp/patches/security/samba-3.2.6-CVE-2009-0022.patch - http://www.mandriva.com/security/advisories?name=MDVSA-2009:042 - http://secunia.com/advisories/33392 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47733 - http://www.securitytrack
p://secunia.com/advisories/33392 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47733 - http://www.securitytracker.com/id?1021513 - https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00309.html - http://www.securityfocus.com/bid/33118 - https://usn.ubuntu.com/702-1/ - http://www.samba.org/samba/security/CVE-2009-0022.html - http://osvdb.org/51152 - http://secunia.com/advisories/33379 - http://secunia.com/advisories/33431 - http://www.vupen.com/english/advisories/2009/0017
CVE ID: CVE-2009-0023 State: PUBLISHED Published: 2009-06-06T18:00:00 Last Updated: 2024-08-07T04:17:10.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server, (2) the SVNMasterURI directive in the mod_dav_svn module in the Apache HTTP Server, (3) the mod_apreq2 module for the Apache HTTP Server, or (4) an application that uses the libapreq2 library, which triggers a heap-based buffer underflow. Additional Analyst Notes: - CVE Program Contai
uses the libapreq2 library, which triggers a heap-based buffer underflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35487 - http://www.debian.org/security/2009/dsa-1812 - http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3 - http://www.vupen.com/english/advisories/2009/1907 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html - http://secunia.com/advisories/35444 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK88341 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:131 - http://secunia.com/advisories/35360 - https://bugzilla.redhat.com/show_bug.cgi?id=503928 - http://secunia.com/advisories/353
://secunia.com/advisories/35360 - https://bugzilla.redhat.com/show_bug.cgi?id=503928 - http://secunia.com/advisories/35395 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12321 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50964 - http://secunia.com/advisories/35284 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241 - http://www.securityfocus.com/archive/1/507855/100/0/threaded - http://www.securityfocus.com/bid/35221 - http://secunia.com/advisories/35843 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html - http://www.redhat.com/support/errata/
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html - http://www.redhat.com/support/errata/RHSA-2009-1108.html - http://marc.info/?l=bugtraq&m=129190899612998&w=2 - http://wiki.rpath.com/Advisories:rPSA-2009-0144 - http://secunia.com/advisories/35797 - http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html - http://security.gentoo.org/glsa/glsa-200907-03.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10968 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html - http://www.ubuntu.com/usn/usn-786-1 - http://secunia.com/advisories/34724 - http://secunia.com/advisories/37221
.html - http://www.ubuntu.com/usn/usn-786-1 - http://secunia.com/advisories/34724 - http://secunia.com/advisories/37221 - http://svn.apache.org/viewvc?view=rev&revision=779880 - http://secunia.com/advisories/35565 - http://www.vupen.com/english/advisories/2009/3184 - http://marc.info/?l=bugtraq&m=129190899612998&w=2 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.538210 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://secunia.com/advisories/35710 - http://www.redhat.com/support/errata/RHSA-
curity/advisories?name=MDVSA-2013:150 - http://secunia.com/advisories/35710 - http://www.redhat.com/support/errata/RHSA-2009-1107.html - http://support.apple.com/kb/HT3937 - http://www.ubuntu.com/usn/usn-787-1 - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.ap
rg%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f
495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://list
he.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2009-0024 State: PUBLISHED Published: 2009-01-13T16:00:00Z Last Updated: 2024-08-07T04:17:10.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sys_remap_file_pages function in mm/fremap.c in the Linux kernel before 2.6.24.1 allows local users to cause a denial of service or gain privileges via unspecified vectors, related to the vm_file structure member, and the mmap_region and do_munmap functions. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.24.y.git%3Ba=commit%3Bh=8a459e44ad837018ea5c34a9efe8eb4ad27ded26 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1 - http://openw
8a459e44ad837018ea5c34a9efe8eb4ad27ded26 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1 - http://openwall.com/lists/oss-security/2009/01/12/1 - http://www.securityfocus.com/bid/33211
CVE ID: CVE-2009-0025 State: PUBLISHED Published: 2009-01-07T17:00:00 Last Updated: 2024-08-07T04:17:10.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2009-0004.html - http://marc.info/?l=bugtraq&m=141879471518471&w=2 - http://www.securityfocus.com/bid/33151 - http://support.apple.com/kb/HT354
/marc.info/?l=bugtraq&m=141879471518471&w=2 - http://www.securityfocus.com/bid/33151 - http://support.apple.com/kb/HT3549 - http://www.securityfocus.com/archive/1/499827/100/0/threaded - http://marc.info/?l=bugtraq&m=141879471518471&w=2 - https://issues.rpath.com/browse/RPL-2938 - http://www.openbsd.org/errata44.html#008_bind - http://wiki.rpath.com/Advisories:rPSA-2009-0009 - http://secunia.com/advisories/33546 - http://support.avaya.com/elmodocs2/security/ASA-2009-045.htm - http://secunia.com/advisories/35074 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5569 - http://secunia.com/advisories/33559 - http://sunsolve.sun.com/search/document.do?assetk
%3Aorg.mitre.oval%3Adef%3A5569 - http://secunia.com/advisories/33559 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-250846-1 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.vupen.com/english/advisories/2009/0904 - http://www.vupen.com/english/advisories/2009/0043 - http://www.ocert.org/advisories/ocert-2008-016.html - http://www.securityfocus.com/archive/1/502322/100/0/threaded - http://security.freebsd.org/advisories/FreeBSD-SA-09:04.bind.asc - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362 - http://secunia.com/advisories/33882 - https://oval.cisecurity.org/repository/search/definition/oval
re-security.540362 - http://secunia.com/advisories/33882 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10879 - https://www.isc.org/software/bind/advisories/cve-2009-0025 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33 - http://www.vupen.com/english/advisories/2009/1297 - http://secunia.com/advisories/33683 - http://www.vupen.com/english/advisories/2009/0366 - http://www.securityfocus.com/archive/1/500207/100/0/threaded - http://secunia.com/advisories/33494 - http://secunia.com/advisories/33551 - https://www.redhat.com/archives/fedora-package-announc
unia.com/advisories/33494 - http://secunia.com/advisories/33551 - https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00393.html
CVE ID: CVE-2009-0026 State: PUBLISHED Published: 2009-01-21T20:00:00 Last Updated: 2024-08-07T04:17:10.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to (1) search.jsp or (2) swr.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4942 - http://www.securityfocus.com/archive/1/500196/100/0/threaded - http://www.apache.org/dist/jackrabbit/RELEASE-NOTES-1.5.2.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/48110 - http://secunia.com/advisories/
it/RELEASE-NOTES-1.5.2.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/48110 - http://secunia.com/advisories/33576 - https://issues.apache.org/jira/browse/JCR-1925 - http://www.vupen.com/english/advisories/2009/0177 - http://www.securityfocus.com/bid/33360
CVE ID: CVE-2009-0027 State: PUBLISHED Published: 2009-03-09T21:00:00 Last Updated: 2024-08-07T04:17:10.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read arbitrary XML files via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34112 - http://rhn.redhat.com/errata/RHSA-2009-0346.html - https://jira.jboss.org/jira/browse/JBP
secunia.com/advisories/34112 - http://rhn.redhat.com/errata/RHSA-2009-0346.html - https://jira.jboss.org/jira/browse/JBPAPP-1548 - https://bugzilla.redhat.com/show_bug.cgi?id=479668 - http://www.securitytracker.com/id?1021817 - http://rhn.redhat.com/errata/RHSA-2009-0347.html - http://www.securityfocus.com/bid/34023 - http://rhn.redhat.com/errata/RHSA-2009-0348.html - http://rhn.redhat.com/errata/RHSA-2009-0349.html
CVE ID: CVE-2009-0028 State: PUBLISHED Published: 2009-02-27T17:00:00 Last Updated: 2024-08-07T04:17:10.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35390 - http://www.redhat.com/support/errata/RHSA-2009-0326.html - http://secunia.com/advisories/34962 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:11
SA-2009-0326.html - http://secunia.com/advisories/34962 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:118 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html - http://secunia.com/advisories/37471 - http://rhn.redhat.com/errata/RHSA-2009-0459.html - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11187 - https://bugzilla.redhat.com/show_bug.cgi?id=479932 - http://www.debian.org/security/2009/dsa-1794 - http://www.securityfocus.com/archive/1/503610/100/0/threaded - http://secunia.com/advisories/33758 - http://www.securityfocus.com/bid/33906 - http://li
chive/1/503610/100/0/threaded - http://secunia.com/advisories/33758 - http://www.securityfocus.com/bid/33906 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html - http://www.ubuntu.com/usn/usn-751-1 - http://secunia.com/advisories/35011 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/35120 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7947 - http://secunia.com/advisories/34033 - http://secunia.com/advisories/34981 - http://www.debian.org/security/2009/dsa-1800 - http://scarybeastsecurity.blogspot.com/20
/secunia.com/advisories/34981 - http://www.debian.org/security/2009/dsa-1800 - http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-signal-vulnerability.html - http://secunia.com/advisories/34917 - http://www.debian.org/security/2009/dsa-1787 - http://osvdb.org/52204 - http://wiki.rpath.com/Advisories:rPSA-2009-0084 - http://www.redhat.com/support/errata/RHSA-2009-0451.html - http://secunia.com/advisories/35121 - http://secunia.com/advisories/34680 - http://www.vupen.com/english/advisories/2009/3316 - http://secunia.com/advisories/35394 - http://scary.beasts.org/security/CESA-2009-002.html
CVE ID: CVE-2009-0029 State: PUBLISHED Published: 2009-01-15T17:00:00 Last Updated: 2024-08-07T04:17:10.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ABI in the Linux kernel 2.6.28 and earlier on s390, powerpc, sparc64, and mips 64-bit platforms requires that a 32-bit argument in a 64-bit register was properly sign extended when sent from a user-mode application, but cannot verify this, which allows local users to cause a denial of service (crash) or possibly gain privileges via a crafted system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:135 - http://secunia.com/advisories/33477 - ht
References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:135 - http://secunia.com/advisories/33477 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html - http://www.securityfocus.com/bid/33275 - http://www.debian.org/security/2009/dsa-1749 - http://www.debian.org/security/2009/dsa-1794 - https://bugzilla.redhat.com/show_bug.cgi?id=479969 - http://secunia.com/advisories/33674 - http://secunia.com/advisories/35011 - http://secunia.com/advisories/34981 - http://secunia.com/advisories/34394 - http://www.debian.org/security/2009/dsa-1787 - https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01045.html - http://marc.info/?l=linux-kernel&
- https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01045.html - http://marc.info/?l=linux-kernel&m=123155111608910&w=2
CVE ID: CVE-2009-0030 State: PUBLISHED Published: 2009-01-21T20:00:00 Last Updated: 2024-08-07T04:17:10.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID cookie value for all sessions, which allows remote authenticated users to access other users' folder lists and configuration data in opportunistic circumstances by using the standard webmail.php interface. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3663. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2009-0057.html - http://secunia.com/advisories/33611 - https://bugzilla.redh
ences: - https://rhn.redhat.com/errata/RHSA-2009-0057.html - http://secunia.com/advisories/33611 - https://bugzilla.redhat.com/show_bug.cgi?id=480488 - https://bugzilla.redhat.com/show_bug.cgi?id=480224 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10366 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48115 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://securitytracker.com/id?1021611 - http://www.securityfocus.com/bid/33354
CVE ID: CVE-2009-0031 State: PUBLISHED Published: 2009-01-21T02:00:00 Last Updated: 2024-08-07T04:17:10.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of service (kernel memory consumption) via unknown vectors related to a "missing kfree." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34502 - http://www.redhat.com/support/errata/RHSA-2009-0331.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11386 - http://lists.opensuse.org/ope
s://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11386 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html - http://www.redhat.com/support/errata/RHSA-2009-0360.html - http://www.debian.org/security/2009/dsa-1749 - http://www.debian.org/security/2009/dsa-1794 - http://git2.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0d54ee1c7850a954026deec4cd4885f331da35cc - http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm - http://www.ubuntu.com/usn/usn-751-1 - http://secunia.com/advisories/34252 - http://secunia.com/advisories/35011 - http://rhn.redhat.com/errata/RHSA-2009-0264.html - http://secunia.com/advisori
2 - http://secunia.com/advisories/35011 - http://rhn.redhat.com/errata/RHSA-2009-0264.html - http://secunia.com/advisories/33858 - http://www.openwall.com/lists/oss-security/2009/01/19/4 - http://secunia.com/advisories/34981 - http://secunia.com/advisories/34394 - http://www.debian.org/security/2009/dsa-1787 - http://osvdb.org/51501 - http://secunia.com/advisories/34762
CVE ID: CVE-2009-0032 State: PUBLISHED Published: 2009-01-27T20:00:00 Last Updated: 2024-08-07T04:17:10.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1021637 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48210 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:029 - http://www
xforce.ibmcloud.com/vulnerabilities/48210 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:029 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:028 - http://www.securityfocus.com/bid/33418