Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1408 State: PUBLISHED Published: 2009-04-24T14:00:00 Last Updated: 2024-08-07T05:13:25.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover in nested BBcode tags, as demonstrated using (1) email, (2) img, and (3) url tags. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/53782 - https://www.exploit-db.com/exploits/8453 - http://secunia.com/advisories/34764 - http://www.webspell.org/index.php?site=news_commen
.exploit-db.com/exploits/8453 - http://secunia.com/advisories/34764 - http://www.webspell.org/index.php?site=news_comments&newsID=126&lang=uk - http://www.securityfocus.com/bid/34595 - http://www.securityfocus.com/archive/1/502732/100/0/threaded - http://www.webspell.org/index.php?site=files&file=25 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49937
CVE ID: CVE-2009-1409 State: PUBLISHED Published: 2009-04-24T14:00:00 Last Updated: 2024-08-07T05:13:25.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in usersettings.php in e107 0.7.15 and earlier, when "Extended User Fields" is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hide parameter, a different vector than CVE-2005-4224 and CVE-2008-5320. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49981 - http://osvdb.org/53812 - https://www.exploit-db.com/exploits/8495 - http://www.s
ce.ibmcloud.com/vulnerabilities/49981 - http://osvdb.org/53812 - https://www.exploit-db.com/exploits/8495 - http://www.securityfocus.com/bid/34614
CVE ID: CVE-2009-1410 State: PUBLISHED Published: 2009-04-24T14:00:00 Last Updated: 2024-08-07T05:13:25.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49989 - http://www.securityfocus.com/bid/34647 - https://www.exploit-db.com/exploits/8505
CVE ID: CVE-2009-1411 State: PUBLISHED Published: 2009-04-24T14:00:00 Last Updated: 2024-08-07T05:13:25.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in events/inc/events.inc.php in the Events plugin for Seditio CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the c parameter to plug.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49975 - http://osvdb.org/53827 - http://www.securityfocus.com/bid/34608 - http://www.vupen.com/english/advisories/2009/1112 - http://secunia.com/advisories/34812 - https://www.exploit-db.com/exploits/8482
CVE ID: CVE-2009-1412 State: PUBLISHED Published: 2009-04-24T15:00:00 Last Updated: 2024-08-07T05:13:25.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in the chromehtml: protocol handler in Google Chrome before 1.0.154.59, when invoked by Internet Explorer, allows remote attackers to determine the existence of files, and open tabs for URLs that do not satisfy the IsWebSafeScheme restriction, via a web page that sets document.location to a chromehtml: value, as demonstrated by use of a (1) javascript: or (2) data: URL. NOTE: this can be leveraged for Universal XSS by exploiting certain behavior involving persistence across page transitions. Ad
this can be leveraged for Universal XSS by exploiting certain behavior involving persistence across page transitions. Additional Analyst Notes: - CVE Program Container: References: - http://chromium.googlecode.com/issues/attachment?aid=5579180911289877192&name=Google+Chrome+Advisory.doc - https://exchange.xforce.ibmcloud.com/vulnerabilities/50449 - http://code.google.com/p/chromium/issues/detail?id=9860 - http://googlechromereleases.blogspot.com/2009/04/stable-update-security-fix.html
CVE ID: CVE-2009-1413 State: PUBLISHED Published: 2009-04-24T15:00:00 Last Updated: 2024-08-07T05:13:25.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome 1.0.x does not cancel timeouts upon a page transition, which makes it easier for attackers to conduct Universal XSS attacks by calling setTimeout to trigger future execution of JavaScript code, and then modifying document.location to arrange for JavaScript execution in the context of an arbitrary web site. NOTE: this can be leveraged for a remote attack by exploiting a chromehtml: argument-injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.co
tion vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50447 - http://chromium.googlecode.com/issues/attachment?aid=5579180911289877192&name=Google+Chrome+Advisory.doc - http://code.google.com/p/chromium/issues/detail?id=9860
CVE ID: CVE-2009-1414 State: PUBLISHED Published: 2009-04-24T15:00:00 Last Updated: 2024-08-07T05:13:25.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome 2.0.x lets modifications to the global object persist across a page transition, which makes it easier for attackers to conduct Universal XSS attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50446 - http://code.google.com/p/chromium/issues/detail?id=9860
CVE ID: CVE-2009-1415 State: PUBLISHED Published: 2009-04-30T20:00:00 Last Updated: 2024-08-07T05:13:25.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA signatures, which allows remote attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a malformed DSA key that triggers a (1) free of an uninitialized pointer or (2) double free. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50445 - http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3502 - http://art
ibmcloud.com/vulnerabilities/50445 - http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3502 - http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3515 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50257 - http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50260 - http://www.vupen.com/english/advisories/2009/1218 - http://www.securityfocus.com/bid/34783 - http://security.gentoo.org/glsa/glsa-200905-04.xml - http://www.securitytracker.com/id?1022157 - http://secunia.com/advisories/34842 - http://secunia.com/advisories/35211 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:1
m/advisories/34842 - http://secunia.com/advisories/35211 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:116
CVE ID: CVE-2009-1416 State: PUBLISHED Published: 2009-04-30T20:00:00 Last Updated: 2024-08-07T05:13:25.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow remote attackers to spoof signatures on certificates or have unspecified other impact by leveraging an invalid DSA key. Additional Analyst Notes: - CVE Program Container: References: - http://lists.gnu.org/archive/html/help-gnutls/2009-04/msg00018.html - http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3516 - http://www.securitytracker.com/id?1022158 - http:/
ttp://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3516 - http://www.securitytracker.com/id?1022158 - http://www.vupen.com/english/advisories/2009/1218 - http://www.securityfocus.com/bid/34783 - http://security.gentoo.org/glsa/glsa-200905-04.xml - http://secunia.com/advisories/34842 - http://secunia.com/advisories/35211 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:116
CVE ID: CVE-2009-1417 State: PUBLISHED Published: 2009-04-30T20:00:00 Last Updated: 2024-08-07T05:13:25.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is (1) not yet valid or (2) no longer valid, related to lack of time checks in the _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls_x509, as used by (a) Exim, (b) OpenLDAP, and (c) libsoup. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50261 - http://w
lyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50261 - http://www.securitytracker.com/id?1022159 - http://www.vupen.com/english/advisories/2009/1218 - http://www.securityfocus.com/bid/34783 - http://security.gentoo.org/glsa/glsa-200905-04.xml - http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3517 - http://secunia.com/advisories/34842 - http://secunia.com/advisories/35211 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:116
CVE ID: CVE-2009-1418 State: PUBLISHED Published: 2009-05-19T19:00:00 Last Updated: 2024-08-07T05:13:25.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 3.0.1.73 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000029.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50633 - http://www.securityfocus.com/bid/35031 - http://securitytracker.com/id?1022242 - http://secunia.com/advisories/35108 - http://jvn.jp/en/jp/JVN02331156/index.htm
http://securitytracker.com/id?1022242 - http://secunia.com/advisories/35108 - http://jvn.jp/en/jp/JVN02331156/index.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01745065 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01745065
CVE ID: CVE-2009-1419 State: PUBLISHED Published: 2009-06-06T18:00:00 Last Updated: 2024-08-07T05:13:25.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.0.0 through 2.52, 7.50, and 7.51 on Windows allows remote attackers to access DDMI agents via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=124423677616704&w=2 - http://www.vupen.com/english/advisories/2009/1514 - http://www.securitytracker.com/id?1022339 - http://marc.info/?l=bugtraq&m=124423677616704&w=2 - http://secunia.com/advisories/35270 - http://www.securityfocus.com/bid/352
/marc.info/?l=bugtraq&m=124423677616704&w=2 - http://secunia.com/advisories/35270 - http://www.securityfocus.com/bid/35250
CVE ID: CVE-2009-1420 State: PUBLISHED Published: 2009-06-11T15:00:00 Last Updated: 2024-08-07T05:13:25.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when used with SNMP (aka HPOvNNM.HPOVSNMP) before 1.30.009 and MIB (aka HPOvNNM.HPOVMIB) before 1.30.009, allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=124457320614552&w=2 - http://www.securityfocus.com/bid/35267 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=81
2&w=2 - http://www.securityfocus.com/bid/35267 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=810 - http://securitytracker.com/id?1022360 - http://secunia.com/advisories/35408 - http://www.vupen.com/english/advisories/2009/1549 - http://marc.info/?l=bugtraq&m=124457320614552&w=2
CVE ID: CVE-2009-1421 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:13:25.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in NFS / ONCplus B.11.31_06 and B.11.31_07 on HP HP-UX B.11.31 allows local users to cause a denial of service via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=124654506100944&w=2 - http://www.vupen.com/english/advisories/2009/1755 - http://marc.info/?l=bugtraq&m=124654506100944&w=2 - http://securitytracker.com/id?1022493 - http://secunia.com/advisories/35644 - http://www.securityfocus.com/bid/35547
CVE ID: CVE-2009-1422 State: PUBLISHED Published: 2009-07-14T20:16:00 Last Updated: 2024-08-07T05:13:25.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to gain privileges via unknown vectors, aka PR_41209. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1869 - http://marc.info/?l=bugtraq&m=124751363528317&w=2 - http://www.securitytracker.com/id?1022536 - http://marc.info/?l=bugtraq&m=124751363528317&w=2
CVE ID: CVE-2009-1423 State: PUBLISHED Published: 2009-07-14T20:16:00 Last Updated: 2024-08-07T05:13:25.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service via unknown vectors, aka PR_39898, a different vulnerability than CVE-2009-1424 and CVE-2009-1425. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51689 - http://www.vupen.com/english/advisories/2009/1869 - http://marc.info/?l=bugtraq&m=124751363528317&w=2 - http://www.securitytracker.com/id?102
english/advisories/2009/1869 - http://marc.info/?l=bugtraq&m=124751363528317&w=2 - http://www.securitytracker.com/id?1022536 - http://marc.info/?l=bugtraq&m=124751363528317&w=2
CVE ID: CVE-2009-1424 State: PUBLISHED Published: 2009-07-14T20:16:00 Last Updated: 2024-08-07T05:13:25.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service via unknown vectors, aka PR_39412, a different vulnerability than CVE-2009-1423 and CVE-2009-1425. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1869 - http://marc.info/?l=bugtraq&m=124751363528317&w=2 - http://www.securitytracker.com/id?1022536 - http://marc.info/?l=bugtraq&m=124751363528317&w=2
CVE ID: CVE-2009-1425 State: PUBLISHED Published: 2009-07-14T20:16:00 Last Updated: 2024-08-07T05:13:25.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service by triggering a stop or crash in httpd, aka PR_18770, a different vulnerability than CVE-2009-1423 and CVE-2009-1424. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51691 - http://www.vupen.com/english/advisories/2009/1869 - http://marc.info/?l=bugtraq&m=124751363528317&w=2 - http://www.securit
tp://www.vupen.com/english/advisories/2009/1869 - http://marc.info/?l=bugtraq&m=124751363528317&w=2 - http://www.securitytracker.com/id?1022536 - http://marc.info/?l=bugtraq&m=124751363528317&w=2 - http://www.securityfocus.com/bid/35653 - http://cdn.procurve.com/training/Manuals/TMSzlModule-RelNotes-90603-59900224.pdf
CVE ID: CVE-2009-1426 State: PUBLISHED Published: 2009-07-29T17:00:00 Last Updated: 2024-08-07T05:13:25.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on HP ProLiant DL and ML 100 Series G5, G5p, and G6 servers with ProLiant Onboard Administrator Powered by LO100i (formerly Lights Out 100) 3.07 and earlier allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=124881779623139&w=2 - http://secunia.com/advisories/35990 - http://marc.info/?l=bugtraq&m=124881779623139&w=2 - http://www.securitytracker.com/id?1022617
CVE ID: CVE-2009-1427 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T05:13:25.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP-UX B.11.31 allows local users to cause a denial of service (system crash) via unknown vectors related to the ttrace system call. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832652 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6215 - http://secunia.com/advisories/36261 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832652 - http://w
cunia.com/advisories/36261 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832652 - http://www.securityfocus.com/bid/36017 - http://www.securitytracker.com/id?1022706 - http://www.vupen.com/english/advisories/2009/2230 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19004
CVE ID: CVE-2009-1428 State: PUBLISHED Published: 2009-04-29T15:00:00 Last Updated: 2024-08-07T05:13:25.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus (SAV) before 10.1 MR8, Symantec Endpoint Protection (SEP) 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, related to "two parsing errors." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50170 - http://www.
t Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50170 - http://www.vupen.com/english/advisories/2009/1203 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_01 - http://www.securityfocus.com/bid/34669 - http://www.securitytracker.com/id?1022135 - http://www.securitytracker.com/id?1022134 - http://www.securitytracker.com/id?1022133 - http://secunia.com/advisories/34936 - http://osvdb.org/54132
CVE ID: CVE-2009-1429 State: PUBLISHED Published: 2009-04-29T15:00:00 Last Updated: 2024-08-07T05:13:25.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary commands via a crafted packet whose conte
Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary commands via a crafted packet whose contents are interpreted as a command to be launched in a new process by the CreateProcessA function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1204 - http://www.securitytracker.com/id?1022132 - http://www.securitytracker.com/id?1022130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50176 - http://www.securityfocus.com/bid/34671 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02 - http://secunia.com/advisories/348
s/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02 - http://secunia.com/advisories/34856 - http://osvdb.org/54157 - http://www.securitytracker.com/id?1022131 - http://securityreason.com/securityalert/8346
CVE ID: CVE-2009-1430 State: PUBLISHED Published: 2009-04-29T15:00:00 Last Updated: 2024-08-07T05:13:25.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allow remote attackers to execute arbitra
and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allow remote attackers to execute arbitrary code via (1) a crafted packet or (2) data that ostensibly arrives from the MsgSys.exe process. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1204 - http://www.securitytracker.com/id?1022132 - http://www.securityfocus.com/archive/1/503080/100/0/threaded - http://www.securitytracker.com/id?1022130 - http://www.securityfocus.com/bid/34674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50178 - http://www.securityfocus.com/bid/34672 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fi
50178 - http://www.securityfocus.com/bid/34672 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50177 - http://secunia.com/advisories/34856 - http://www.securitytracker.com/id?1022131 - http://www.zerodayinitiative.com/advisories/ZDI-09-018/
CVE ID: CVE-2009-1431 State: PUBLISHED Published: 2009-04-29T15:00:00 Last Updated: 2024-08-07T05:13:25.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary code by placing the code
mantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary code by placing the code on a (1) share or (2) WebDAV server, and then sending the UNC share pathname to this service. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1204 - http://www.securitytracker.com/id?1022132 - http://www.securitytracker.com/id?1022130 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=786 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02 - http://secunia.com/advisories/34856 - http://www.securitytracke
sory&pvid=security_advisory&year=2009&suid=20090428_02 - http://secunia.com/advisories/34856 - http://www.securitytracker.com/id?1022131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50179 - http://www.securityfocus.com/bid/34675