Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2106 State: PUBLISHED Published: 2009-06-17T17:00:00 Last Updated: 2024-08-07T05:36:20.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Virtual Civil Services (civserv) extension 4.3.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/civserv/4.3.3/ - http://www.securityfocus.com/bid/35395 - http://osvdb.org/55121 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-007/ - http://secunia.com/advisories/35479
CVE ID: CVE-2009-2107 State: PUBLISHED Published: 2009-06-17T17:00:00 Last Updated: 2024-08-07T05:36:20.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Webmedia Explorer (webmex) 5.09 and 5.10 allow remote attackers to inject arbitrary web script or HTML via event handlers such as onmouseover in the (1) search or (2) tag parameters; (3) arbitrary invalid parameter names that are not properly handled when triggered on a column; (4) bookmark parameter in an edit action; or (5) email parameter in a remember action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/
in a remember action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35368 - http://www.securityfocus.com/archive/1/504307/100/0/threaded - http://secunia.com/advisories/35477 - http://forum.intern0t.net/intern0t-advisories/1123-intern0t-webmedia-explorer-cross-site-scripting-vulnerability.html
CVE ID: CVE-2009-2108 State: PUBLISHED Published: 2009-06-18T18:00:00 Last Updated: 2024-08-07T05:36:20.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request containing extra unrecognized arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022398 - http://www.vupen.com/english/advisories/2009/1579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51083 - http://thread.gmane.org/gmane.comp.version-control.git/120724 - https://www.redhat.com/archives/fedora-security-list/2009-June
/thread.gmane.org/gmane.comp.version-control.git/120724 - https://www.redhat.com/archives/fedora-security-list/2009-June/msg00000.html - http://osvdb.org/55034 - http://secunia.com/advisories/35730 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01126.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01056.html - http://secunia.com/advisories/35437 - http://www.securityfocus.com/bid/35338 - http://security.gentoo.org/glsa/glsa-200907-05.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2009:155 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01045.html - http://article.gmane.org/gmane.comp.version-control.git/
.com/archives/fedora-package-announce/2009-June/msg01045.html - http://article.gmane.org/gmane.comp.version-control.git/120733 - http://www.openwall.com/lists/oss-security/2009/06/12/1
CVE ID: CVE-2009-2109 State: PUBLISHED Published: 2009-06-18T21:00:00 Last Updated: 2024-08-07T05:36:20.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in FretsWeb 1.2 allow remote attackers to read arbitrary files via directory traversal sequences in the (1) language parameter to charts.php and the (2) fretsweb_language cookie parameter to unspecified vectors, possibly related to admin/common.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55166 - http://secunia.com/advisories/35492 - https://www.exploit-db.com/exploits/8979 - http://osvdb.org/55196
CVE ID: CVE-2009-2110 State: PUBLISHED Published: 2009-06-18T21:00:00 Last Updated: 2024-08-07T05:36:20.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the u parameter to (1) full.php, (2) index.php, and (3) contact.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55118 - https://www.exploit-db.com/exploits/8952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51120 - http://secunia.com/advisories/35419 - http://osvdb.org/55117 - http://osvdb.or
orce.ibmcloud.com/vulnerabilities/51120 - http://secunia.com/advisories/35419 - http://osvdb.org/55117 - http://osvdb.org/55116
CVE ID: CVE-2009-2111 State: PUBLISHED Published: 2009-06-18T21:00:00 Last Updated: 2024-08-07T05:36:20.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in add_reg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP code via a crafted (1) url and (2) location parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8951 - http://secunia.com/advisories/35419 - http://osvdb.org/55119 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51121
CVE ID: CVE-2009-2112 State: PUBLISHED Published: 2009-06-18T21:00:00 Last Updated: 2024-08-07T05:36:20.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in include/page_bottom.php in phpFK 7.03 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the _FORUM[settings_design_style] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8975 - http://osvdb.org/55195
CVE ID: CVE-2009-2113 State: PUBLISHED Published: 2009-06-18T21:00:00 Last Updated: 2024-08-07T05:36:20.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in FretsWeb 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to player.php and the (2) hash parameter to song.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8980 - http://sourceforge.net/forum/forum.php?forum_id=966939 - http://secunia.com/advisories/35492 - http://osvdb.org/55168 - http://osvdb.org/55167
CVE ID: CVE-2009-2114 State: PUBLISHED Published: 2009-06-18T21:00:00 Last Updated: 2024-08-07T05:36:20.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin.php in SkyBlueCanvas 1.1 r237 allow remote attackers to inject arbitrary web script or HTML via the (1) mgroup, (2) mgr, (3) objtype, (4) id, and (5) dir parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51165 - http://osvdb.org/55115 - http://forum.intern0t.net/intern0t-advisories/1120-intern0t-skybluecanvas-1-1-r237-multiple-vulnerabilities.html - h
5 - http://forum.intern0t.net/intern0t-advisories/1120-intern0t-skybluecanvas-1-1-r237-multiple-vulnerabilities.html - http://www.securityfocus.com/archive/1/504302/100/0/threaded
CVE ID: CVE-2009-2115 State: PUBLISHED Published: 2009-06-18T21:00:00 Last Updated: 2024-08-07T05:36:20.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to obtain sensitive information via an invalid id parameter, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51164 - http://www.securityfocus.com/archive/1/504302/100/0/threaded
CVE ID: CVE-2009-2116 State: PUBLISHED Published: 2009-06-18T21:00:00 Last Updated: 2024-08-07T05:36:21.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to list directory contents via a .. (dot dot) in the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35478 - http://forum.intern0t.net/intern0t-advisories/1120-intern0t-skybluecanvas-1-1-r237-multiple-vulnerabilities.html - http://www.securityfocus.com/archive/1/504302/100/0/threaded
CVE ID: CVE-2009-2117 State: PUBLISHED Published: 2009-06-18T21:00:00 Last Updated: 2024-08-07T05:36:21.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: uye_paneli.php in phPortal 1.0 allows remote attackers to bypass authentication and obtain administrative access by setting the kulladi cookie to a valid username. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55192 - https://www.exploit-db.com/exploits/8981
CVE ID: CVE-2009-2118 State: PUBLISHED Published: 2009-06-18T21:00:00 Last Updated: 2024-08-07T05:36:21.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in IrfanView 4.23, when the resampling or screen fitting option is enabled, allows remote attackers to execute arbitrary code via a crafted TIFF 1 BPP image, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35359 - http://osvdb.org/55150 - http://www.irfanview.com/main_history.htm - http://www.securityfocus.com/bid/35423
CVE ID: CVE-2009-2119 State: PUBLISHED Published: 2009-06-18T21:00:00 Last Updated: 2024-08-07T05:36:20.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login interface (my.logon.php3) in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35418 - http://secunia.com/advisories/35426 - https://www.fox-it.com/nl/nieuws-en-events/nieuws/laatste-nieuws/nieuwsartikel/f5-firepass-cross-site-scripting-vulnerability/106 - http://osvdb.org
euws-en-events/nieuws/laatste-nieuws/nieuwsartikel/f5-firepass-cross-site-scripting-vulnerability/106 - http://osvdb.org/55040 - https://www.fox-it.com/uploads/pdf/advisory_xss_f5_firepass.pdf - http://www.securityfocus.com/archive/1/504232/100/0/threaded - http://www.securityfocus.com/bid/35312 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51064 - http://www.vupen.com/english/advisories/2009/1570 - http://www.securitytracker.com/id?1022387
CVE ID: CVE-2009-2120 State: PUBLISHED Published: 2009-06-18T21:00:00 Last Updated: 2024-08-07T05:36:20.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) ids parameter to admin.php, the (2) y parameter to members.php, and other unspecified vectors. NOTE: vector 1 requires administrative access. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8977 - http://osvdb.org/55190 - http://osvdb.org/55191 - http://secunia.com/advisories/35481
CVE ID: CVE-2009-2121 State: PUBLISHED Published: 2009-06-23T21:21:00 Last Updated: 2024-08-07T05:36:20.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the browser kernel in Google Chrome before 2.0.172.33 allows remote HTTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted response. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35462 - http://code.google.com/p/chromium/issues/detail?id=14508 - http://secunia.com/advisories/35548 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51307 - http://osvdb.org/55278 - http://www.securitytracker.com/id?1
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/51307 - http://osvdb.org/55278 - http://www.securitytracker.com/id?1022429 - http://www.vupen.com/english/advisories/2009/1656 - http://googlechromereleases.blogspot.com/2009/06/stable-beta-update-security-fix.html
CVE ID: CVE-2009-2122 State: PUBLISHED Published: 2009-06-19T17:32:00 Last Updated: 2024-08-07T05:36:20.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35450 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51152 - https://www.exploit-db.com/exploits/8961 - http://www.securityfocus.com/bid/35382
CVE ID: CVE-2009-2123 State: PUBLISHED Published: 2009-06-19T17:32:00 Last Updated: 2024-08-07T05:36:21.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) inUser (aka Username) and (2) inPass (aka Password) parameters to (a) inc/login.ei, reachable through login.php; and the (3) id parameter to (b) show_bug.php and (c) show_activity.php. NOTE: it was later reported that vector 3c also affects 1.2.2. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35486 - https://www.exploit-db.com/exploits/8953 - https://www.exp
ontainer: References: - http://secunia.com/advisories/35486 - https://www.exploit-db.com/exploits/8953 - https://www.exploit-db.com/exploits/9342
CVE ID: CVE-2009-2124 State: PUBLISHED Published: 2009-06-19T17:32:00 Last Updated: 2024-08-07T05:36:21.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35486 - https://www.exploit-db.com/exploits/8953
CVE ID: CVE-2009-2125 State: PUBLISHED Published: 2009-06-19T17:32:00Z Last Updated: 2024-09-16T23:45:50.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: delete_bug.php in Elvin before 1.2.1 does not require administrative privileges, which allows remote authenticated users to bypass intended access restrictions and delete arbitrary bugs. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.elvinbts.org/show_bug.php?id=50 - http://secunia.com/advisories/35430 - http://osvdb.org/55101
CVE ID: CVE-2009-2126 State: PUBLISHED Published: 2009-06-19T17:32:00Z Last Updated: 2024-09-16T19:10:10.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the title (aka subject) field. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.elvinbts.org/show_bug.php?id=49 - http://secunia.com/advisories/35430 - http://osvdb.org/55100
CVE ID: CVE-2009-2127 State: PUBLISHED Published: 2009-06-19T17:32:00 Last Updated: 2024-08-07T05:36:20.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in show_activity.php in Elvin 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35486 - https://www.exploit-db.com/exploits/8953
CVE ID: CVE-2009-2128 State: PUBLISHED Published: 2009-06-19T17:32:00Z Last Updated: 2024-09-17T02:41:21.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the title (aka subject) field. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.elvinbts.org/show_bug.php?id=49 - http://secunia.com/advisories/35430
CVE ID: CVE-2009-2129 State: PUBLISHED Published: 2009-06-19T17:32:00 Last Updated: 2024-08-07T05:36:20.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authentication of arbitrary users via a logout action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8953
CVE ID: CVE-2009-2130 State: PUBLISHED Published: 2009-06-19T17:32:00 Last Updated: 2024-08-07T05:36:21.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Elvin 1.2.0 allows remote attackers to read the PHP source code of (1) login.ei, (2) jump_bug.ei, or (3) create_account.ei in inc/ via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8953
CVE ID: CVE-2009-2131 State: PUBLISHED Published: 2009-06-19T17:32:00 Last Updated: 2024-08-07T05:36:20.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in 4images 1.7.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML by providing a crafted user_homepage parameter to member.php, and then posting a comment associated with a picture. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35342 - http://osvdb.org/55092 - http://secunia.com/advisories/35427 - https://www.exploit-db.com/exploits/8936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51090 -
isories/35427 - https://www.exploit-db.com/exploits/8936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51090 - http://www.vupen.com/english/advisories/2009/1582 - http://www.4homepages.de/forum/index.php?topic=15186.0
CVE ID: CVE-2009-2132 State: PUBLISHED Published: 2009-06-19T17:32:00Z Last Updated: 2024-09-17T03:17:21.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in global.php in 4images before 1.7.7, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35427 - http://bbs.wolvez.org/topic/56/ - http://www.4homepages.de/forum/index.php?topic=15186.0
CVE ID: CVE-2009-2133 State: PUBLISHED Published: 2009-06-19T17:32:00 Last Updated: 2024-08-07T05:36:21.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote attackers to inject arbitrary web script or HTML via the (1) menu or (2) sort parameter to pivot/index.php, (3) the value of a check array parameter in a delete action to pivot/index.php, (4) the element name in a check array parameter in a delete action to pivot/index.php, (5) the edituser parameter in an edituser action to pivot/index.php, (6) the edit parameter in a templates action to pivot/index.php, (7) the blog parameter in a blo
ion to pivot/index.php, (6) the edit parameter in a templates action to pivot/index.php, (7) the blog parameter in a blog_edit1 action to pivot/index.php, (8) the cat parameter in a cat_edit action to pivot/index.php, (9) a certain form field in a doaction=1 request to pivot/index.php, (10) the url field in a my_weblog edit_prefs action to pivot/user.php, or (11) the username (aka name) field in a my_weblog reg_user action to pivot/user.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8941 - http://www.securityfocus.com/bid/35363 - http://forum.intern0t.net/intern0t-advisories/1119-intern0t-pivot-1-40-4-7-multiple-vulnerabilities.html
om/bid/35363 - http://forum.intern0t.net/intern0t-advisories/1119-intern0t-pivot-1-40-4-7-multiple-vulnerabilities.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/51098 - http://secunia.com/advisories/35363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51099 - http://osvdb.org/55085 - http://osvdb.org/55086 - http://www.securityfocus.com/archive/1/504300/100/0/threaded
CVE ID: CVE-2009-2134 State: PUBLISHED Published: 2009-06-19T19:00:00 Last Updated: 2024-08-07T05:36:21.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: pivot/tb.php in Pivot 1.40.4 and 1.40.7 allows remote attackers to obtain sensitive information via an invalid url parameter, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8941 - http://forum.intern0t.net/intern0t-advisories/1119-intern0t-pivot-1-40-4-7-multiple-vulnerabilities.html - http://www.securityfocus.com/archive/1/504300/100/0/threaded
CVE ID: CVE-2009-2135 State: PUBLISHED Published: 2009-06-19T19:00:00 Last Updated: 2024-08-07T05:36:21.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in the Solaris Event Port API in Sun Solaris 10 and OpenSolaris before snv_107 allow local users to cause a denial of service (panic) via unspecified vectors related to a race between the port_dissociate and close functions. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-260449-1 - http://support.avaya.com/elmodocs2/security/ASA-2009-246.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3
docs2/security/ASA-2009-246.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5906 - http://www.vupen.com/english/advisories/2009/1634 - http://www.securitytracker.com/id?1022422 - http://osvdb.org/55232 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1 - http://www.securityfocus.com/bid/35437 - http://osvdb.org/55231 - http://secunia.com/advisories/35279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51284
CVE ID: CVE-2009-2136 State: PUBLISHED Published: 2009-06-19T19:00:00 Last Updated: 2024-08-07T05:36:21.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris snv_01 through snv_82 and snv_111 through snv_117, when a Cassini GigaSwift Ethernet Adapter (aka CE) interface is used, allows remote attackers to cause a denial of service (panic) via vectors involving jumbo frames. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2555 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1 - http://sunsolve.sun.com/search/doc
es/2009/2555 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-257008-1 - http://osvdb.org/55233 - http://secunia.com/advisories/35507
CVE ID: CVE-2009-2137 State: PUBLISHED Published: 2009-06-19T19:00:00 Last Updated: 2024-08-07T05:36:21.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the Ultra-SPARC T2 crypto provider device driver (aka n2cp) in Sun Solaris 10, and OpenSolaris snv_54 through snv_112, allows context-dependent attackers to cause a denial of service (memory consumption) via unspecified vectors related to a large keylen value. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-258828-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-140386-03-1 - http://osvdb.org/55234 - http://secunia.com/advisori
p://sunsolve.sun.com/search/document.do?assetkey=1-21-140386-03-1 - http://osvdb.org/55234 - http://secunia.com/advisories/35403