Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3332 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JBudgetsMagic (com_jbudgetsmagic) component 0.3.2 through 0.4.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the bid parameter in a mybudget action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36461 - http://www.exploit-db.com/exploits/9723
CVE ID: CVE-2009-3333 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in koesubmit.php in the koeSubmit (com_koesubmit) component 1.0 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36447 - http://www.exploit-db.com/exploits/9714
CVE ID: CVE-2009-3334 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component (aka JINC or com_jinc) component 0.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a messages action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9732 - http://www.securityfocus.com/bid/36471
CVE ID: CVE-2009-3335 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the TurtuShout component 0.11 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Name field. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53209
CVE ID: CVE-2009-3336 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in auction_details.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL commands via the auction_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36389 - http://www.exploit-db.com/exploits/9665 - http://www.vupen.com/english/advisories/2009/2661
CVE ID: CVE-2009-3337 State: PUBLISHED Published: 2009-09-24T16:00:00Z Last Updated: 2024-09-16T20:17:04.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Freetag (serendipity_event_freetag) plugin before 3.09 for Serendipity (S9Y) allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry. Additional Analyst Notes: - CVE Program Container: References: - http://blog.s9y.org/archives/210-Security-update-for-Freetag-Plugin.html - http://secunia.com/advisories/36706 - http://www.securityfocus.com/bid/36376
CVE ID: CVE-2009-3338 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in EffectMatrix (E.M.) Magic Morph 1.95b allows remote attackers to execute arbitrary code via a long string in a .mor file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36721 - http://www.exploit-db.com/exploits/9659 - http://www.vupen.com/english/advisories/2009/2658
CVE ID: CVE-2009-3339 State: PUBLISHED Published: 2009-09-24T16:00:00Z Last Updated: 2024-09-17T03:43:29.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in McAfee Email and Web Security Appliance 5.1 VMtrial allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.9 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracke
tifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022829 - http://intevydis.com/vd-list.shtml - http://secunia.com/advisories/36574
CVE ID: CVE-2009-3340 State: PUBLISHED Published: 2009-09-24T16:00:00Z Last Updated: 2024-09-16T18:24:39.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in FreeSSHD 1.2.4 allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36506 - http://intevydis.com/vd-list.sh
lyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36506 - http://intevydis.com/vd-list.shtml - http://www.securitytracker.com/id?1022811
CVE ID: CVE-2009-3341 State: PUBLISHED Published: 2009-09-24T16:00:00Z Last Updated: 2024-09-17T03:03:10.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow on the Linksys WRT54GL wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.10 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022827 -
purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022827 - http://secunia.com/advisories/36571 - http://intevydis.com/vd-list.shtml
CVE ID: CVE-2009-3342 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in frontend/assets/ajax/checkusername.php in the AlphaUserPoints (com_alphauserpoints) component 1.5.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the username2points parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/9654 - http://www.vupen.com/english/advisories/2009/2659 - http://www.securityfocus.com/bid/36383
CVE ID: CVE-2009-3343 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in details.asp in HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9675 - http://secunia.com/advisories/36747
CVE ID: CVE-2009-3344 State: PUBLISHED Published: 2009-09-24T16:00:00Z Last Updated: 2024-09-16T23:11:16.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to cause a denial of service (infinite loop) via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securi
CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36267 - http://intevydis.com/vd-list.shtml - http://secunia.com/advisories/36583
CVE ID: CVE-2009-3345 State: PUBLISHED Published: 2009-09-24T16:00:00Z Last Updated: 2024-09-17T03:02:22.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36267 - http://intevydis.com/vd-list.shtm
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36267 - http://intevydis.com/vd-list.shtml - http://secunia.com/advisories/36583
CVE ID: CVE-2009-3346 State: PUBLISHED Published: 2009-09-24T16:00:00Z Last Updated: 2024-09-17T02:47:01.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36267 - ht
g purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36267 - http://intevydis.com/vd-list.shtml - http://secunia.com/advisories/36583
CVE ID: CVE-2009-3347 State: PUBLISHED Published: 2009-09-24T16:00:00Z Last Updated: 2024-09-17T04:29:38.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.10 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36237 - http
purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36237 - http://www.osvdb.org/57791 - http://www.securitytracker.com/id?1022826 - http://secunia.com/advisories/36454 - http://intevydis.com/vd-list.shtml
CVE ID: CVE-2009-3348 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a cat action to the home component. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53195 - http://www.exploit-db.com/exploits/9640
CVE ID: CVE-2009-3349 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a cat action to the home component. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53194 - http://www.exploit-db.com/exploits/9640
CVE ID: CVE-2009-3350 State: PUBLISHED Published: 2009-09-24T16:00:00Z Last Updated: 2024-09-16T19:15:11.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Subdomain Manager module for Drupal have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36329 - http://drupal.org/node/572852
CVE ID: CVE-2009-3351 State: PUBLISHED Published: 2009-09-24T16:00:00Z Last Updated: 2024-09-17T02:06:33.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Node Browser module for Drupal have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/572852 - http://www.securityfocus.com/bid/36325
CVE ID: CVE-2009-3352 State: PUBLISHED Published: 2009-09-24T16:00:00Z Last Updated: 2024-09-17T02:36:14.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the quota_by_role (Quota by role) module for Drupal have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36330 - http://drupal.org/node/572852
CVE ID: CVE-2009-3353 State: PUBLISHED Published: 2009-09-24T16:00:00Z Last Updated: 2024-09-17T02:01:51.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Node2Node module for Drupal have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36323 - http://drupal.org/node/572852
CVE ID: CVE-2009-3354 State: PUBLISHED Published: 2009-09-24T16:00:00Z Last Updated: 2024-09-17T01:00:57.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Rest API module for Drupal have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36331 - http://drupal.org/node/572852
CVE ID: CVE-2009-3355 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inject arbitrary web script or HTML via the s_r parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53176 - http://osvdb.org/57967 - http://packetstormsecurity.org/0909-exploits/buydatingsite-xss.txt - http://secunia.com/advisories/36662
CVE ID: CVE-2009-3356 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to execute arbitrary SQL commands via the show parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9639 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53178 - http://secunia.com/advisories/36705
CVE ID: CVE-2009-3357 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) h_id, (2) id, and (3) rid parameters to longDesc.php, and the h_id parameter to (4) detail.php, (5) detail1.php, (6) detail2.php, (7) detail3.php, (8) detail4.php, (9) detail5.php, (10) detail6.php, (11) detail7.php, and (12) detail8.php, different vectors than CVE-2008-5865, CVE-2008-5874, and CVE-2008-5875. Additional Analyst Notes
, and (12) detail8.php, different vectors than CVE-2008-5865, CVE-2008-5874, and CVE-2008-5875. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33215 - http://www.exploit-db.com/exploits/9648 - http://www.securityfocus.com/bid/36380 - http://e-rdc.org/v1/news.php?readmore=142 - http://www.securityfocus.com/archive/1/506444/100/0/threaded
CVE ID: CVE-2009-3358 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows remote attackers to execute arbitrary SQL commands via the user_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53134 - http://www.exploit-db.com/exploits/9634
CVE ID: CVE-2009-3359 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Match Agency BiZ 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) important parameter to edit_profile.php and (2) pid parameter to report.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/57969 - http://osvdb.org/57968 - http://packetstormsecurity.org/0909-exploits/matchagencybiz-xss.txt - http://secunia.com/advisories/36672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53173
CVE ID: CVE-2009-3360 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Datemill 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) return parameter to photo_view.php, and st parameter to (2) photo_search.php and (3) search.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/57989 - http://www.osvdb.org/57990 - http://osvdb.org/57991 - http://packetstormsecurity.org/0909-exploits/datemill-xss.txt - http://secunia.com/advisories/36608 - https://exchange.xforce.ibmcloud.com/vulnerabil
g/0909-exploits/datemill-xss.txt - http://secunia.com/advisories/36608 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53177
CVE ID: CVE-2009-3361 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PHP-IPNMonitor allows remote attackers to execute arbitrary SQL commands via the maincat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9647
CVE ID: CVE-2009-3362 State: PUBLISHED Published: 2009-09-24T16:00:00Z Last Updated: 2024-09-16T17:22:39.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/57986 - http://packetstormsecurity.org/0909-exploits/sznews-rfi.txt - http://secunia.com/advisories/36699
CVE ID: CVE-2009-3363 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the BUEditor module 5.x before 5.x-1.2 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via input to the "plain textarea editor." Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/572850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53132 - http://secunia.com/advisories/36678 - http://www.securityfocus.com/bid/36320 - http://www.osvdb.org/57870
CVE ID: CVE-2009-3364 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long response to a PASV command. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/57899 - http://secunia.com/advisories/36628 - http://www.exploit-db.com/exploits/9613 - http://www.securityfocus.com/bid/36327 - http://www.vupen.com/english/advisories/2009/2604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53126
CVE ID: CVE-2009-3365 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:25.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in add-ons/modules/sysmanager/plugins/install.plugin.php in Aurora CMS 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the AURORA_MODULES_FOLDER parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9656
CVE ID: CVE-2009-3366 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in navigation.php in An image gallery 1.0 allows remote attackers to list arbitrary directories via a .. (dot dot) in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/57943 - http://www.exploit-db.com/exploits/9636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53148 - http://secunia.com/advisories/36680
CVE ID: CVE-2009-3367 State: PUBLISHED Published: 2009-09-24T16:00:00Z Last Updated: 2024-09-17T02:56:39.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) index.php and (2) main.php, and the (3) show parameter to main.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/57945 - http://osvdb.org/57944 - http://secunia.com/advisories/36680
CVE ID: CVE-2009-3368 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the adult parameter in a showhoteldetails action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33215 - http://www.exploit-db.com/exploits/9648 - http://www.securityfocus.com/bid/36380 - http://e-rdc.org/v1/news.php?readmore=142 - http://www.securityfocus.com/archive/1/506
www.securityfocus.com/bid/36380 - http://e-rdc.org/v1/news.php?readmore=142 - http://www.securityfocus.com/archive/1/506444/100/0/threaded
CVE ID: CVE-2009-3369 State: PUBLISHED Published: 2009-09-24T16:00:00 Last Updated: 2024-08-07T06:22:24.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then initiating a backup or restore. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=518412 - http://secunia.com/advisories/36393 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=54
t.com/show_bug.cgi?id=518412 - http://secunia.com/advisories/36393 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542218 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00729.html - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00694.html - http://secunia.com/advisories/37161 - http://osvdb.org/57236