Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://news.cnet.com/8301-27080_3-10395891-245.html - http://www.securitytracker.com/id?1023179 - http://g-laurent.blogspot.com/2009/11/windows-7-server-2008r2-remote-kernel.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7186 - http://www.microsoft.com/technet/security/advisory/977544.mspx - http://secunia.com/advisories/37347 - http://www.vupen.com/english/advisories/2009/3216 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020 - http://praetorianprefect.com/archives/2009/11/how-to-crash-windows-7-and-server-2008/ - http://secunia.c
2010/ms10-020 - http://praetorianprefect.com/archives/2009/11/how-to-crash-windows-7-and-server-2008/ - http://secunia.com/blog/66/ - http://seclists.org/fulldisclosure/2009/Nov/134 - http://blogs.technet.com/msrc/archive/2009/11/13/microsoft-security-advisory-977544-released.aspx - http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE ID: CVE-2009-3677 State: PUBLISHED Published: 2009-12-09T18:00:00 Last Updated: 2024-08-07T06:38:30.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Authentication Service (IAS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly verify the credentials in an MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication request, which allows remote attackers to access network resources via a malformed request, aka "MS-CHAP Authentication Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/se
." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-071 - http://www.us-cert.gov/cas/techalerts/TA09-342A.html - http://www.securitytracker.com/id?1023291 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6209
CVE ID: CVE-2009-3678 State: PUBLISHED Published: 2010-05-14T19:24:00 Last Updated: 2024-08-07T06:38:30.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in cdd.dll in the Canonical Display Driver (CDD) in Microsoft Windows Server 2008 R2 and Windows 7 on 64-bit platforms, when the Windows Aero theme is installed, allows context-dependent attackers to cause a denial of service (reboot) or possibly execute arbitrary code via a crafted image file that triggers incorrect data parsing after user-mode data is copied to kernel mode, as demonstrated using "Browse with Irfanview" and certain actions on a folder containing a large number of thumbnail images in Resample
using "Browse with Irfanview" and certain actions on a folder containing a large number of thumbnail images in Resample mode, possibly related to the ATI graphics driver or win32k.sys, aka "Canonical Display Driver Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.microsoft.com/technet/security/advisory/2028859.mspx - http://isc.sans.org/diary.html?storyid=8809 - http://osvdb.org/64731 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7195 - http://en.irfanview-forum.de/vb/showthread.php?5647-V4-25-bluescreen-with-Windows-7-cdd-dll-win32k-sys - https://docs.microsoft.com/en-us/security-updates/s
thread.php?5647-V4-25-bluescreen-with-Windows-7-cdd-dll-win32k-sys - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-043 - http://blogs.technet.com/srd/archive/2010/05/18/cdd-dll-vulnerability-difficult-to-exploit.aspx - https://exchange.xforce.ibmcloud.com/vulnerabilities/58622 - http://www.us-cert.gov/cas/techalerts/TA10-194A.html - http://blogs.technet.com/msrc/archive/2010/05/18/security-advisory-2028859-released.aspx - http://secunia.com/advisories/39577 - http://www.securityfocus.com/bid/40237 - http://www.vupen.com/english/advisories/2010/1178 - http://pcandmactech.blogspot.com/2009/12/irfanview-and-bsod.html
CVE ID: CVE-2009-3679 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3680 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3681 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3682 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3683 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3684 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3685 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3686 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3687 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3688 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3689 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3691 State: PUBLISHED Published: 2009-10-13T10:00:00 Last Updated: 2024-08-07T06:38:30.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted (1) HostSize, and possibly (2) ProtoSize and (3) ServerSize, field that triggers a stack-based buffer overflow involving a crafted HostList field. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vul
y information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53644 - http://securitytracker.com/id?1022985 - http://retrogod.altervista.org/9sg_ibm_setnet32.html - http://secunia.com/advisories/36949 - http://www.vupen.com/english/advisories/2009/2834 - http://www.osvdb.org/58530 - http://www.securityfocus.com/bid/36588
CVE ID: CVE-2009-3692 State: PUBLISHED Published: 2009-10-13T10:00:00 Last Updated: 2024-08-07T06:38:30.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the VBoxNetAdpCtl configuration tool in Sun VirtualBox 3.0.x before 3.0.8 on Solaris x86, Linux, and Mac OS X allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.virtualbox.org/wiki/Changelog - http://www.vupen.com/english/advisories/2009/2845 - http://www.securityfocus.com/bid/36604 - http://www.osvdb.org/58652 - http://securitytracker.com/id?1022990 - http://secunia.com/advisories/36929 - http://sunsolve.sun.com/se
vdb.org/58652 - http://securitytracker.com/id?1022990 - http://secunia.com/advisories/36929 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-268188-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53671
CVE ID: CVE-2009-3693 State: PUBLISHED Published: 2009-10-13T10:00:00Z Last Updated: 2024-09-16T17:32:35.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via \.. (backwards slash dot dot) sequences in the third argument to the MakeHttpRequest method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36898 - http://retrogod.altervista.org/9sg_hp_loadrunner.html
CVE ID: CVE-2009-3694 State: PUBLISHED Published: 2009-10-13T10:00:00 Last Updated: 2024-08-07T06:38:30.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in config/config.php in ezRecipe-Zee 91, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cfg[prePath] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36992 - http://osvdb.org/58709 - http://securityreason.com/expldownload/1/7380/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53696
CVE ID: CVE-2009-3695 State: PUBLISHED Published: 2009-10-13T10:00:00 Last Updated: 2024-08-07T06:38:30.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a crafted (1) EmailField (email address) or (2) URLField (URL) that triggers a large amount of backtracking in a regular expression. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53727 - http://www.djangoproject.com/weblog/2009/oct/09/sec
36655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53727 - http://www.djangoproject.com/weblog/2009/oct/09/security/ - http://secunia.com/advisories/36948 - http://secunia.com/advisories/36968 - http://www.debian.org/security/2009/dsa-1905 - http://groups.google.com/group/django-users/browse_thread/thread/15df9e45118dfc51/ - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550457 - http://www.openwall.com/lists/oss-security/2009/10/13/6 - http://www.vupen.com/english/advisories/2009/2871
CVE ID: CVE-2009-3696 State: PUBLISHED Published: 2009-10-16T16:00:00 Last Updated: 2024-08-07T06:38:29.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/ - http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php - http://freshmeat.net/projects/phpmyadmin/releases/306667 - https:
w.phpmyadmin.net/home_page/security/PMASA-2009-6.php - http://freshmeat.net/projects/phpmyadmin/releases/306667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53742 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.html - http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.html - https://bugzilla.redhat.com/show_bug.cgi?id=528769 - http://marc.info/?l=oss-security&m=125553728512853&w=2 - http://freshmeat.net/projects/phpmyadmin/releases/306669 - http://marc.info/?l=oss-security&m=125561979001460&w=2 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html - http://www.vupen.com/englis
0&w=2 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html - http://www.vupen.com/english/advisories/2009/2899 - http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.html - http://bugs.gentoo.org/show_bug.cgi?id=288899 - http://www.securityfocus.com/bid/36658 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html - http://secunia.com/advisories/37016 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:274
CVE ID: CVE-2009-3697 State: PUBLISHED Published: 2009-10-16T16:00:00 Last Updated: 2024-08-07T06:38:30.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified interface parameters. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/ - http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php - http://freshmeat.net/projects/phpmyadmin/
sa-2009-015/ - http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php - http://freshmeat.net/projects/phpmyadmin/releases/306667 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.html - http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.html - https://bugzilla.redhat.com/show_bug.cgi?id=528769 - http://marc.info/?l=oss-security&m=125553728512853&w=2 - http://freshmeat.net/projects/phpmyadmin/releases/306669 - http://marc.info/?l=oss-security&m=125561979001460&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53741 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html - htt
oud.com/vulnerabilities/53741 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html - http://www.vupen.com/english/advisories/2009/2899 - http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.html - http://bugs.gentoo.org/show_bug.cgi?id=288899 - http://www.securityfocus.com/bid/36658 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html - http://secunia.com/advisories/37016 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:274
CVE ID: CVE-2009-3698 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T06:38:29.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified function in the Dalvik API in Android 1.5 and earlier allows remote attackers to cause a denial of service (system process restart) via a crafted application, possibly a related issue to CVE-2009-2656. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53654 - http://securitytracker.com/id?1022986 - http://www.ocert.org/advisories/ocert-2009-014.html - http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=cf4550c3198d6b3d92
es/ocert-2009-014.html - http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=cf4550c3198d6b3d92cdc52707fe70d7cc0caa9f - http://www.securityfocus.com/bid/36590 - http://www.securityfocus.com/archive/1/506948/100/0/threaded
CVE ID: CVE-2009-3699 State: PUBLISHED Published: 2009-10-15T10:00:00 Last Updated: 2024-08-07T06:38:30.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2846 - http://www.ibm.com/support/docview.wss?uid=isg1IZ62237 - http://www.ibm.com/support/docview.wss?uid=isg1IZ62570 - http://www.ibm.com/suppor
support/docview.wss?uid=isg1IZ62237 - http://www.ibm.com/support/docview.wss?uid=isg1IZ62570 - http://www.ibm.com/support/docview.wss?uid=isg1IZ61628 - http://securitytracker.com/id?1022996 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=825 - http://aix.software.ibm.com/aix/efixes/security/cmsd_advisory.asc - http://www.ibm.com/support/docview.wss?uid=isg1IZ62569 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53681 - http://www.ibm.com/support/docview.wss?uid=isg1IZ62571 - http://www.ibm.com/support/docview.wss?uid=isg1IZ62123 - http://www.ibm.com/support/docview.wss?uid=isg1IZ62672 - http://www.ibm.com/support/docview.wss?uid=isg1IZ62572 - http://secunia.com/
m.com/support/docview.wss?uid=isg1IZ62672 - http://www.ibm.com/support/docview.wss?uid=isg1IZ62572 - http://secunia.com/advisories/36978 - http://www.ibm.com/support/docview.wss?uid=isg1IZ61717 - https://www.immunityinc.com/downloads/immpartners/aixcmsd10092009.tar.gz - http://www.osvdb.org/58726 - http://www.securityfocus.com/bid/36615
CVE ID: CVE-2009-3700 State: PUBLISHED Published: 2009-10-28T14:00:00 Last Updated: 2024-08-07T06:38:30.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service (application hang or loss of blocking functionality) via a long URL with many / (slash) characters, related to "emergency mode." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53921 - http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091015 - http://www.vupen.com/english/advisories/2009/3013 - http://securitytracker.com/id?1023079 - http://
dme.Patch-20091015 - http://www.vupen.com/english/advisories/2009/3013 - http://securitytracker.com/id?1023079 - http://secunia.com/advisories/37107 - http://www.vupen.com/english/advisories/2010/1043 - http://www.osvdb.org/59163 - http://www.debian.org/security/2010/dsa-2040 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://www.securityfocus.com/bid/36800 - http://secunia.com/advisories/39679 - http://www.securityfocus.com/archive/1/507440/100/0/threaded
CVE ID: CVE-2009-3701 State: PUBLISHED Published: 2009-12-21T16:00:00 Last Updated: 2024-08-07T06:38:30.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) phpshell.php, (2) cmdshell.php, or (3) sqlshell.php in admin/, related to the PHP_SELF variable. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37823 - http://marc.info/?l=horde-announce&m=
otes: - CVE Program Container: References: - http://secunia.com/advisories/37823 - http://marc.info/?l=horde-announce&m=126100750018478&w=2 - http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0388.html - http://lists.horde.org/archives/announce/2009/000529.html - http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.559&r2=1.515.2.589&ty=h - http://www.vupen.com/english/advisories/2009/3549 - http://www.securityfocus.com/archive/1/508531/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/54817 - http://www.securityfocus.com/bid/37351 - http://marc.info/?l=horde-announce&m=126101076422179&w=2 - http://secunia.com/advisories/37709 - http://www.vupen.com/eng
ttp://marc.info/?l=horde-announce&m=126101076422179&w=2 - http://secunia.com/advisories/37709 - http://www.vupen.com/english/advisories/2009/3572 - http://securitytracker.com/id?1023365
CVE ID: CVE-2009-3702 State: PUBLISHED Published: 2009-12-22T19:00:00 Last Updated: 2024-08-07T06:38:30.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbitrary local files via a full pathname in the configfile parameter to (1) update08.php or (2) update10.php. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/508548/100/0/threaded
CVE ID: CVE-2009-3703 State: PUBLISHED Published: 2009-12-18T19:00:00 Last Updated: 2024-08-07T06:38:30.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the WP-Forum plugin before 2.4 for WordPress allow remote attackers to execute arbitrary SQL commands via (1) the search_max parameter in a search action to the default URI, related to wpf.class.php; (2) the forum parameter to an unspecified component, related to wpf.class.php; (3) the topic parameter in a viewforum action to the default URI, related to the remove_topic function in wpf.class.php; or the id parameter in a (4) editpost or (5) viewtopic action to the default URI, related
ic function in wpf.class.php; or the id parameter in a (4) editpost or (5) viewtopic action to the default URI, related to wpf-post.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37357 - http://www.securityfocus.com/archive/1/508504/100/0/threaded
CVE ID: CVE-2009-3704 State: PUBLISHED Published: 2009-10-16T17:00:00 Last Updated: 2024-08-07T06:38:30.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service (crash) via a SIP INVITE request with an empty Call-Info header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53792 - http://packetstormsecurity.org/0910-exploits/zoiper_dos.py.txt
CVE ID: CVE-2009-3705 State: PUBLISHED Published: 2009-10-16T16:00:00Z Last Updated: 2024-09-16T18:48:54.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the config_atkroot parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023017 - http://packetstormsecurity.org/0909-exploits/achievo134-rfi.txt - http://www.achievo.org/download/releasenotes/1_4_0
CVE ID: CVE-2009-3706 State: PUBLISHED Published: 2009-10-16T16:00:00Z Last Updated: 2024-09-16T22:09:44.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the ZFS filesystem in Sun Solaris 10, and OpenSolaris snv_100 through snv_117, allows local users to bypass intended limitations of the file_chown_self privilege via certain uses of the chown system call. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141444-09-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-265908-1 - http://www.securityfocus.com/bid/36702 - http://www.vupen.com/english/advisories/2009/2917 -
o?assetkey=1-66-265908-1 - http://www.securityfocus.com/bid/36702 - http://www.vupen.com/english/advisories/2009/2917 - http://secunia.com/advisories/37010
CVE ID: CVE-2009-3707 State: PUBLISHED Published: 2009-10-16T16:00:00 Last Updated: 2024-08-07T06:38:30.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware ACE 2.6 before 2.6.1 build 227600 and 2.5.x before 2.5.4 build 246459, and VMware Server 2.x allows remote attackers to cause a denial of service (process crash) via a \x25\xFF sequence in the USER and PASS commands, related to a "format string DoS" issue. NOTE: som