Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rivileged actions by intercepting these credentials, and then using them in requests unrelated to the intended synchronization task, as demonstrated by (1) DC Directory account credentials in CUCM 4.x and (2) TabSyncSysUser account credentials in CUCM 5.x through 7.x. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34082 - http://osvdb.org/52589 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a8643c.shtml - http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080a86434.html - http://www.securitytracker.com/id?1021839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49196 - http://secun
- http://www.securitytracker.com/id?1021839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49196 - http://secunia.com/advisories/34238 - http://www.vupen.com/english/advisories/2009/0675
CVE ID: CVE-2009-0633 State: PUBLISHED Published: 2009-03-27T16:00:00 Last Updated: 2024-08-07T04:40:05.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service (input queue wedge and interface outage) via MIPv6 packets, aka Bug ID CSCsm97220. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml - http://secunia.com/advisories/34438 - https://oval.cisecurity.org/repository/search/definition/oval%3Aor
0a90469.shtml - http://secunia.com/advisories/34438 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12290 - http://www.securityfocus.com/bid/34241 - http://securitytracker.com/id?1021898 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a9042f.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/49424 - http://www.vupen.com/english/advisories/2009/0851
CVE ID: CVE-2009-0634 State: PUBLISHED Published: 2009-03-27T16:00:00 Last Updated: 2024-08-07T04:40:05.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the home agent (HA) implementation in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service (input queue wedge and interface outage) via an ICMP packet, aka Bug ID CSCso05337. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12043 - http://www.cisco.com/en/US/products/products_security_adv
sitory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12043 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml - http://secunia.com/advisories/34438 - http://www.securityfocus.com/bid/34241 - http://securitytracker.com/id?1021898 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a9042f.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/49585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49424 - http://www.vupen.com/english/advisories/2009/0851
CVE ID: CVE-2009-0635 State: PUBLISHED Published: 2009-03-27T16:00:00 Last Updated: 2024-08-07T04:40:05.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the Cisco Tunneling Control Protocol (cTCP) encapsulation feature in Cisco IOS 12.4, when an Easy VPN (aka EZVPN) server is enabled, allows remote attackers to cause a denial of service (memory consumption and device crash) via a sequence of TCP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90459.shtml - http://secunia.com/advi
9.shtml - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90459.shtml - http://secunia.com/advisories/34438 - http://www.securityfocus.com/bid/34246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49417 - http://www.securitytracker.com/id?1021895 - http://www.vupen.com/english/advisories/2009/0851
CVE ID: CVE-2009-0636 State: PUBLISHED Published: 2009-03-27T16:00:00 Last Updated: 2024-08-07T04:40:04.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when SIP voice services are enabled, allows remote attackers to cause a denial of service (device crash) via a valid SIP message. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c0.shtml - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml - http://www.securityfocus.com/bid/34243 - http://secunia.com/advisories/34438 - https://exchange.xforce.ib
a90469.shtml - http://www.securityfocus.com/bid/34243 - http://secunia.com/advisories/34438 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49421 - http://securitytracker.com/id?1021902 - http://www.vupen.com/english/advisories/2009/0851
CVE ID: CVE-2009-0637 State: PUBLISHED Published: 2009-03-27T16:00:00 Last Updated: 2024-08-07T04:40:05.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not enforce the CLI view configuration for file transfers, which allows remote authenticated users with an attached CLI view to (1) read or (2) overwrite arbitrary files via an SCP command. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c8.shtml - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml - http://secun
6a0080a904c8.shtml - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml - http://secunia.com/advisories/34438 - http://securitytracker.com/id?1021899 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49423 - http://www.securityfocus.com/bid/34247 - http://www.vupen.com/english/advisories/2009/0851
CVE ID: CVE-2009-0638 State: PUBLISHED Published: 2009-08-20T22:00:00 Last Updated: 2024-08-07T04:40:05.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service (traffic-handling outage) via a series of malformed ICMP messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080af0d1d.shtml - http://www.securityfocus.com/bid/36085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5
09186a0080af0d1d.shtml - http://www.securityfocus.com/bid/36085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52591 - http://securitytracker.com/id?1022747 - http://secunia.com/advisories/36373 - http://www.vupen.com/english/advisories/2009/2329
CVE ID: CVE-2009-0639 State: PUBLISHED Published: 2009-02-18T16:00:00 Last Updated: 2024-08-07T04:40:05.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in moduli/libri/index.php in phpyabs 0.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the Azione parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0361 - https://www.exploit-db.com/exploits/8005 - http://www.securityfocus.com/bid/33670
CVE ID: CVE-2009-0640 State: PUBLISHED Published: 2009-02-18T17:00:00 Last Updated: 2024-08-07T04:40:05.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows remote attackers to read arbitrary files via a .. (dot dot) in the URI, as demonstrated by reading the vy_netman.cfg file that contains passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33716 - http://packetstorm.linuxsecurity.com/0902-exploits/cctv-disclose.txt - http://osvdb.org/51897 - http://www.securityfocus.com/archive/1/500789/100/0/threaded - http://secunia.com/adv
ose.txt - http://osvdb.org/51897 - http://www.securityfocus.com/archive/1/500789/100/0/threaded - http://secunia.com/advisories/33861
CVE ID: CVE-2009-0641 State: PUBLISHED Published: 2009-02-18T17:00:00 Last Updated: 2024-08-07T04:40:05.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a method that was valid only in older FreeBSD distributions, which might allow remote attackers to execute arbitrary code by passing a crafted environment variable from a telnet client, as demonstrated by an LD_PRELOAD value that references a malicious library. Additional Analyst Notes: - CVE Program Container: References: - http://security.freebsd.org/advisories/FreeBSD-SA-09:05.telnetd.asc - https://exchange.xforc
am Container: References: - http://security.freebsd.org/advisories/FreeBSD-SA-09:05.telnetd.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/48780 - http://www.securityfocus.com/bid/33777 - http://lists.grok.org.uk/pipermail/full-disclosure/2009-February/067954.html - https://www.exploit-db.com/exploits/8055
CVE ID: CVE-2009-0642 State: PUBLISHED Published: 2009-02-18T17:00:00 Last Updated: 2024-08-07T04:40:05.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSP_basic_verify function, which might allow remote attackers to successfully present an invalid X.509 certificate, possibly involving a revoked certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35937 - http://redmine.ruby-lang.org/issues/show/1091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48761 - http://www.redhat.com/support/errata/RHSA-2009-1140.html - http://w
exchange.xforce.ibmcloud.com/vulnerabilities/48761 - http://www.redhat.com/support/errata/RHSA-2009-1140.html - http://www.ubuntu.com/usn/USN-805-1 - http://www.securityfocus.com/bid/33769 - http://www.securitytracker.com/id?1022505 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11450 - http://secunia.com/advisories/35699 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:193 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=513528 - http://secunia.com/advisories/33750
CVE ID: CVE-2009-0643 State: PUBLISHED Published: 2009-02-18T17:00:00 Last Updated: 2024-08-07T04:40:05.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject arbitrary PHP code into news.txt via the post parameter, and then execute the code via a direct request to display.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7999 - http://osvdb.org/51816 - http://secunia.com/advisories/33814 - http://www.vupen.com/english/advisories/2009/0357 - https:/
tp://osvdb.org/51816 - http://secunia.com/advisories/33814 - http://www.vupen.com/english/advisories/2009/0357 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48829
CVE ID: CVE-2009-0644 State: PUBLISHED Published: 2009-02-18T19:00:00 Last Updated: 2024-08-07T04:40:05.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it easier for remote attackers to obtain privileged access. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0902-exploits/cctv-disclose.txt - http://www.securityfocus.com/archive/1/500789/100/0/threaded
CVE ID: CVE-2009-0645 State: PUBLISHED Published: 2009-02-18T23:00:00 Last Updated: 2024-08-07T04:40:05.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Jaws 0.8.8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) language, (2) Introduction_complete, and (3) use_log parameters, different vectors than CVE-2004-2445. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33607 - https://www.exploit-db.com/exploits/7976 - http://www.jaws-project.com/blog/show/jaws-089-released - https://exchange.xforce.ibmcloud.com/vulnerabilities/48476
CVE ID: CVE-2009-0646 State: PUBLISHED Published: 2009-02-18T23:00:00 Last Updated: 2024-08-07T04:40:05.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login and (2) password parameters to pcgi/4site.pl, (3) page parameter to print/print.shtml, (4) s and (5) i parameters to portfolio/index.shtml, (6) h parameter to hotel/index.php, (7) id parameter to news/news1.shtml, and the (8) th parameter to faq/index.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48486 - http
Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48486 - http://www.securityfocus.com/archive/1/514376/100/0/threaded - https://www.exploit-db.com/exploits/7964 - http://wsec.ru/wsec-09-002-4site-cms-26-multiple-sql-injections/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/48483 - http://www.osvdb.org/51806 - http://www.htbridge.ch/advisory/sql_injection_in_4site_cms.html - http://www.osvdb.org/51809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48488 - http://www.securityfocus.com/bid/33594 - http://www.osvdb.org/51808 - http://www.osvdb.org/51807 - http://secunia.com/advisories/33733 - https://exchange.xforce.ibmc
://www.osvdb.org/51808 - http://www.osvdb.org/51807 - http://secunia.com/advisories/33733 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48487
CVE ID: CVE-2009-0647 State: PUBLISHED Published: 2009-02-19T16:00:00 Last Updated: 2024-08-07T04:40:05.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: msnmsgr.exe in Windows Live Messenger (WLM) 2009 build 14.0.8064.206, and other 14.0.8064.x builds, allows remote attackers to cause a denial of service (application crash) via a modified header in a packet, as possibly demonstrated by a UTF-8.0 value of the charset field in the Content-Type header line. NOTE: this has been reported as a format string vulnerability by some sources, but the provenance of that information is unknown. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/3
information is unknown. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33985 - http://www.vupen.com/english/advisories/2009/0466 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48810 - http://www.securityfocus.com/bid/33825 - http://www.securityfocus.com/archive/1/501043/100/0/threaded
CVE ID: CVE-2009-0648 State: PUBLISHED Published: 2009-02-19T16:00:00 Last Updated: 2024-08-07T04:40:05.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the manage_users handler in admin/index.php in Falt4 CMS (aka Falt4 Extreme) RC4 allow remote attackers to hijack the authentication of administrators for requests that change passwords via the (1) edit and (2) edit_now actions. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0902-exploits/falt4-cms-xsrf.txt - http://secunia.com/advisories/33973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48786
CVE ID: CVE-2009-0649 State: PUBLISHED Published: 2009-02-20T18:00:00 Last Updated: 2024-08-07T04:40:05.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web browser in Symbian OS on the Nokia N95 cell phone allows remote attackers to cause a denial of service (crash) via JavaScript code that calls the setAttributeNode method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8051 - http://www.securityfocus.com/bid/33767 - http://www.securityfocus.com/archive/1/500954/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/48763
CVE ID: CVE-2009-0650 State: PUBLISHED Published: 2009-02-20T18:00:00 Last Updated: 2024-08-07T04:40:05.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 and earlier, and possibly 5.02, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a STATS line with a long pwd field. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48781 - http://secunia.com/advisories/33972 - http://www.securityfocus.com/bid/33785
force.ibmcloud.com/vulnerabilities/48781 - http://secunia.com/advisories/33972 - http://www.securityfocus.com/bid/33785 - https://www.exploit-db.com/exploits/8058
CVE ID: CVE-2009-0651 State: PUBLISHED Published: 2009-02-20T18:00:00 Last Updated: 2024-08-07T04:40:05.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Veritas network daemon (aka vnetd) in Symantec Veritas NetBackup Server / Enterprise Server 5.x, 6.0 before MP7 SP1, and 6.5 before 6.5.3.1 allows remote attackers to execute arbitrary code via unknown vectors related to "initial communications setup." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48795 - http://securityresponse.symantec.com/avcenter/security/Content/2009.02.17.html - http://www.vupen.com/english/advisories
http://securityresponse.symantec.com/avcenter/security/Content/2009.02.17.html - http://www.vupen.com/english/advisories/2009/1097 - http://www.securitytracker.com/id?1021734 - http://www.securityfocus.com/bid/33772 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253287-1 - http://www.vupen.com/english/advisories/2009/0461 - http://seer.entsupport.symantec.com/docs/317828.htm - http://osvdb.org/52269 - http://secunia.com/advisories/33953
CVE ID: CVE-2009-0652 State: PUBLISHED Published: 2009-02-20T19:00:00 Last Updated: 2024-08-07T04:40:05.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by homoglyphs of the / (slash) and ? (question mark) characters in a subdomain of a .cn domain name, a different vulnerability than CVE-2005-0233. NOTE: some third parties claim that 3.0.6 is not affected, but much older versions perha
lnerability than CVE-2005-0233. NOTE: some third parties claim that 3.0.6 is not affected, but much older versions perhaps are affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11396 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html - http://secunia.com/advisories/34894 - http://www.vupen.com/english/advisories/2009/1125 - http://www.debian.org/security/2009/dsa-1830 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48974 - http://lists.immunitysec.com/pipermail/dailydave/2009-Fe
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48974 - http://lists.immunitysec.com/pipermail/dailydave/2009-February/005556.html - http://secunia.com/advisories/34096 - http://secunia.com/advisories/34844 - http://secunia.com/advisories/35065 - http://lists.immunitysec.com/pipermail/dailydave/2009-February/005563.html - https://www.blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf - https://usn.ubuntu.com/764-1/ - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://www.securityfocus.com/bid/33837 - http://secunia.com/advisories/35042 - http://secunia.com/advisories/34843 - http://www.debian.org/security/2009
/33837 - http://secunia.com/advisories/35042 - http://secunia.com/advisories/34843 - http://www.debian.org/security/2009/dsa-1797 - http://rhn.redhat.com/errata/RHSA-2009-0437.html - http://www.redhat.com/support/errata/RHSA-2009-0436.html - http://www.blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Marlinspike - http://www.mozilla.org/security/announce/2009/mfsa2009-15.html
CVE ID: CVE-2009-0653 State: PUBLISHED Published: 2009-02-20T19:00:00Z Last Updated: 2024-09-16T18:29:32.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970. Additional Analyst Notes: - CVE Program Container: References: - https://www.blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf - http://www.blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Marlinspike
CVE ID: CVE-2009-0654 State: PUBLISHED Published: 2009-02-20T19:00:00Z Last Updated: 2024-09-17T03:13:48.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor 0.2.0.28, and probably 0.2.0.34 and earlier, allows remote attackers, with control of an entry router and an exit router, to confirm that a sender and receiver are communicating via vectors involving (1) replaying, (2) modifying, (3) inserting, or (4) deleting a single cell, and then observing cell recognition errors at the exit router. NOTE: the vendor disputes the significance of this issue, noting that the product's design "accepted end-to-end correlation as an attack that is too expensive to solve." Additional Analyst
t the product's design "accepted end-to-end correlation as an attack that is too expensive to solve." Additional Analyst Notes: - CVE Program Container: References: - http://www.blackhat.com/presentations/bh-dc-09/Fu/BlackHat-DC-09-Fu-Break-Tors-Anonymity.pdf - http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Fu - http://blog.torproject.org/blog/one-cell-enough
CVE ID: CVE-2009-0655 State: PUBLISHED Published: 2009-02-20T19:00:00 Last Updated: 2024-08-07T04:40:05.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lenovo Veriface III allows physically proximate attackers to login to a Windows account by presenting a "plain image" of the authorized user. Additional Analyst Notes: - CVE Program Container: References: - http://www.blackhat.com/presentations/bh-dc-09/Nguyen/BlackHat-DC-09-Nguyen-Face-not-your-password.pdf - http://www.securityfocus.com/archive/1/498997 - http://www.securityfocus.com/bid/32700 - http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Nguyen - http://security.bkis.vn/?p=292 - https://exchange.xforce.ibmc
blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Nguyen - http://security.bkis.vn/?p=292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48961