Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0407 State: PUBLISHED Published: 2009-02-03T19:00:00 Last Updated: 2024-08-07T04:31:26.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/login.php in PHP-CMS Project 1 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33473 - https://www.exploit-db.com/exploits/7876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48267 - http://www.vupen.com/english/advisories/2009/0244
CVE ID: CVE-2009-0408 State: PUBLISHED Published: 2009-02-03T19:00:00 Last Updated: 2024-08-07T04:31:26.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48289 - http://holisticinfosec.org/content/view/97/45/ - http://secunia.com/advisories/33446
CVE ID: CVE-2009-0409 State: PUBLISHED Published: 2009-02-03T19:00:00 Last Updated: 2024-08-07T04:31:26.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in offline_auth.php in Max.Blog 1.0.6 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7899 - http://www.securityfocus.com/bid/33493 - http://secunia.com/advisories/33658 - http://www.securityfocus.com/archive/1/500470/100/0/threaded - http://osvdb.org/51645
CVE ID: CVE-2009-0410 State: PUBLISHED Published: 2009-02-03T19:00:00 Last Updated: 2024-08-07T04:31:26.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33744 - http://download.novell.com/Download?buildid=GjZRRdqCFW0 - http://www.novell.com/support/viewContent.do?externalId=7002502 - http://www.securityfocus.com/bid
buildid=GjZRRdqCFW0 - http://www.novell.com/support/viewContent.do?externalId=7002502 - http://www.securityfocus.com/bid/33560 - http://www.securityfocus.com/archive/1/500609/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-09-010/
CVE ID: CVE-2009-0411 State: PUBLISHED Published: 2009-02-03T19:00:00 Last Updated: 2024-08-07T04:31:26.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 1.0.154.46 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls and other web script. Additional Analyst Notes: - CVE Program Container: References: - http://codereview.chromium.org/18533 - http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes - http://src.chromium.org/viewvc/chrome?view=rev&revision=8529 - http://co
ev/getting-involved/dev-channel/release-notes - http://src.chromium.org/viewvc/chrome?view=rev&revision=8529 - http://codereview.chromium.org/11264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48554
CVE ID: CVE-2009-0412 State: PUBLISHED Published: 2009-02-03T20:00:00 Last Updated: 2024-08-07T04:31:26.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ProcessLogin function in class.auth.php in Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition allows remote attackers to bypass authentication and obtain administrative access by reusing the RememberToken cookie after a failed admin login attempt. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021557 - http://www.securityfocus.com/bid/33212 - http://www.securityfocus.com/archive/1/499967/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/47899
CVE ID: CVE-2009-0413 State: PUBLISHED Published: 2009-02-03T23:00:00 Last Updated: 2024-08-07T04:31:26.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in RoundCube Webmail (roundcubemail) 0.2 stable allows remote attackers to inject arbitrary web script or HTML via the background attribute embedded in an HTML e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://trac.roundcube.net/changeset/2245 - http://www.vupen.com/english/advisories/2009/0192 - http://www.securityfocus.com/bid/33372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48129 - http://secunia.com/advisories/33622 - http://secunia.
372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48129 - http://secunia.com/advisories/33622 - http://secunia.com/advisories/33827 - https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00082.html
CVE ID: CVE-2009-0414 State: PUBLISHED Published: 2009-02-03T23:00:00 Last Updated: 2024-08-07T04:31:26.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Tor before 0.2.0.33 has unspecified impact and remote attack vectors that trigger heap corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0210 - http://secunia.com/advisories/34583 - http://archives.seul.org/or/announce/Jan-2009/msg00000.html - http://secunia.com/advisories/33677 - https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00902.html - http://www.securityfocus.com/bid/33399 - http://secunia.com/advi
es/fedora-package-announce/2009-January/msg00902.html - http://www.securityfocus.com/bid/33399 - http://secunia.com/advisories/33635 - http://security.gentoo.org/glsa/glsa-200904-11.xml - http://blog.torproject.org/blog/tor-0.2.0.33-stable-released - http://www.securitytracker.com/id?1021633
CVE ID: CVE-2009-0415 State: PUBLISHED Published: 2009-02-03T23:00:00Z Last Updated: 2024-09-16T20:43:34.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in trickle 1.07 allows local users to execute arbitrary code via a Trojan horse trickle-overload.so in the current working directory, which is referenced in the LD_PRELOAD path. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/01/29/5 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=513456 - http://www.securityfocus.com/bid/33516
CVE ID: CVE-2009-0416 State: PUBLISHED Published: 2009-02-03T23:00:00 Last Updated: 2024-08-07T04:31:26.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL certificate setup program (genSslCert.sh) in Standards Based Linux Instrumentation for Manageability (SBLIM) sblim-sfcb 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /var/tmp/key.pem, (2) /var/tmp/cert.pem, and (3) /var/tmp/ssl.cnf temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33583 - http://sourceforge.net/tracker/index.php?func=detail&aid=2561165&group_id=128809&atid=712784 - http://osvdb.org/51783 - http://so
urceforge.net/tracker/index.php?func=detail&aid=2561165&group_id=128809&atid=712784 - http://osvdb.org/51783 - http://sourceforge.net/forum/forum.php?forum_id=874261 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://secunia.com/advisories/33795
CVE ID: CVE-2009-0417 State: PUBLISHED Published: 2009-02-06T00:00:00 Last Updated: 2024-08-07T04:31:26.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the AgaviWebRouting::gen(null) method in Agavi 0.11 before 0.11.6 and 1.0 before 1.0.0 beta 8 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with certain characters that are not properly handled by web browsers that do not strictly follow RFC 3986, such as Internet Explorer 6 and 7. Additional Analyst Notes: - CVE Program Container: References: - http://blog.agavi.org/post/75829956/agavi-0-11-6-released-fixes-vulnerability - http://www.securityfocus.
References: - http://blog.agavi.org/post/75829956/agavi-0-11-6-released-fixes-vulnerability - http://www.securityfocus.com/bid/33826 - http://trac.agavi.org/ticket/1019 - http://blog.agavi.org/post/75830918/agavi-1-0-0-beta-8-released-fixes-vulnerability
CVE ID: CVE-2009-0418 State: PUBLISHED Published: 2009-02-04T19:00:00 Last Updated: 2024-08-07T04:31:26.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 Neighbor Discovery Protocol (NDP) implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity), read private network traffic, and possibly execute arbitrary code via a spoofed message that modifies the Forward Information Base (FIB), a related issue to CVE-2008-2476. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=123368621330334&w=2 -
76. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=123368621330334&w=2 - http://secunia.com/advisories/33787 - http://www.securitytracker.com/id?1021660 - http://www.vupen.com/english/advisories/2009/0312 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5943 - http://marc.info/?l=bugtraq&m=123368621330334&w=2
CVE ID: CVE-2009-0419 State: PUBLISHED Published: 2009-02-04T19:00:00 Last Updated: 2024-08-07T04:31:26.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft XML Core Services, as used in Microsoft Expression Web, Office, Internet Explorer 6 and 7, and other products, does not properly restrict access from web pages to Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-4033. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcl
te fix for CVE-2008-4033. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48815 - https://bugzilla.mozilla.org/show_bug.cgi?id=380418
CVE ID: CVE-2009-0420 State: PUBLISHED Published: 2009-02-05T00:00:00 Last Updated: 2024-08-07T04:31:26.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the RD-Autos (com_rdautos) 1.5.5 Stable component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7795 - http://secunia.com/advisories/33562 - http://www.securityfocus.com/bid/33297
CVE ID: CVE-2009-0421 State: PUBLISHED Published: 2009-02-05T00:00:00 Last Updated: 2024-08-07T04:31:26.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Eventing (com_eventing) 1.6.x component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33296 - https://www.exploit-db.com/exploits/7793 - http://secunia.com/advisories/33563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48016
CVE ID: CVE-2009-0422 State: PUBLISHED Published: 2009-02-05T00:00:00 Last Updated: 2024-08-07T04:31:26.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when register_globals is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the _SERVER[ConfigFile] parameter to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47945 - http://secunia.com/advisories/33533 - http://www.bugreport.ir/index_60.htm - http://www.securityfocus.com/archive/1/500
http://secunia.com/advisories/33533 - http://www.bugreport.ir/index_60.htm - http://www.securityfocus.com/archive/1/500057/100/0/threaded - https://www.exploit-db.com/exploits/7778
CVE ID: CVE-2009-0423 State: PUBLISHED Published: 2009-02-05T00:00:00 Last Updated: 2024-08-07T04:31:26.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Php Photo Album (PHPPA) 0.8 BETA allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the preview parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33277 - https://www.exploit-db.com/exploits/7786 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48017
CVE ID: CVE-2009-0424 State: PUBLISHED Published: 2009-02-05T00:00:00 Last Updated: 2024-08-07T04:31:26.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sign1.php in AN Guestbook (ANG) before 0.7.7 allows remote attackers to inject arbitrary web script or HTML via the country parameter, which is not properly handled in (1) administrator/manage.php or (2) administrator/trash.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=907703 - http://sourceforge.net/project/shownotes.php?release_id=653720 - h
p://sourceforge.net/forum/forum.php?forum_id=907703 - http://sourceforge.net/project/shownotes.php?release_id=653720 - http://www.securityfocus.com/bid/33292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48018 - http://secunia.com/advisories/33490
CVE ID: CVE-2009-0425 State: PUBLISHED Published: 2009-02-05T00:00:00 Last Updated: 2024-08-07T04:31:26.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the clanek parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7797 - http://www.securityfocus.com/bid/33303
CVE ID: CVE-2009-0426 State: PUBLISHED Published: 2009-02-05T00:00:00 Last Updated: 2024-08-07T04:31:26.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Classified Listings Manager 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33253 - https://www.exploit-db.com/exploits/7767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47959 - http://secunia.com/advisories/33482
CVE ID: CVE-2009-0427 State: PUBLISHED Published: 2009-02-05T00:00:00 Last Updated: 2024-08-07T04:31:26.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Member Directory Manager 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://dmxready.helpserve.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=93 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47960 - http://www.securityfocus.com/bid/33253 - http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12
s/47960 - http://www.securityfocus.com/bid/33253 - http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12 - http://secunia.com/advisories/33482 - https://www.exploit-db.com/exploits/7773
CVE ID: CVE-2009-0428 State: PUBLISHED Published: 2009-02-05T00:00:00 Last Updated: 2024-08-07T04:31:26.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Secure Document Library 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://dmxready.helpserve.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=93 - http://www.securityfocus.com/bid/33253 - http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48013
eady.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48013 - http://secunia.com/advisories/33482 - https://www.exploit-db.com/exploits/7787
CVE ID: CVE-2009-0429 State: PUBLISHED Published: 2009-02-05T00:00:00 Last Updated: 2024-08-07T04:31:26.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to search.asp, (2) SortDir parameter to auctionsended.asp, and the (3) catid parameter to wishlist.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500144/100/0/threaded - http://www.securityfocus.com/bid/33306
CVE ID: CVE-2009-0430 State: PUBLISHED Published: 2009-02-05T00:00:00 Last Updated: 2024-08-07T04:31:26.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to search.asp and the (2) URL parameter to tellafriend.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500144/100/0/threaded - http://www.securityfocus.com/bid/33306
CVE ID: CVE-2009-0431 State: PUBLISHED Published: 2009-02-05T00:00:00Z Last Updated: 2024-09-16T18:14:40.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Default.asp in LinksPro Standard Edition allows remote attackers to execute arbitrary SQL commands via the OrderDirection parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0901-exploits/linkspro-sql.txt - http://www.securityfocus.com/bid/33305
CVE ID: CVE-2009-0432 State: PUBLISHED Published: 2009-02-10T22:13:00 Last Updated: 2024-08-07T04:31:26.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation process for the File Transfer servlet in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.19 does not enable the secure version, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48522 - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://www.securityfocus.com/bid/33700 - http://www-1.ibm.
- http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://www.securityfocus.com/bid/33700 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK59108
CVE ID: CVE-2009-0433 State: PUBLISHED Published: 2009-02-10T22:13:00 Last Updated: 2024-08-07T04:31:26.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1.x before 5.1.1.19, 6.0.x before 6.0.2.29, and 6.1.x before 6.1.0.19, when Web Server plug-in content buffering is enabled, allows attackers to cause a denial of service (daemon crash) via unknown vectors, related to a mishandling of client read failures in which clients receive many 500 HTTP error responses and backend servers are incorrectly labeled as down. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/doc
ctly labeled as down. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PK67161 - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://www.securityfocus.com/bid/33700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48523 - http://www-01.ibm.com/support/docview.wss?uid=swg27006879 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK63499 - http://www-01.ibm.com/support/docview.wss?uid=swg27007033
CVE ID: CVE-2009-0434 State: PUBLISHED Published: 2009-02-10T22:13:00 Last Updated: 2024-08-07T04:31:26.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.31, 6.1.x before 6.1.0.21, and 7.0.x before 7.0.0.1, when Performance Monitoring Infrastructure (PMI) is enabled, allows local users to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files. NOTE: this is probably a duplicate of CVE-2008-5413. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://www-01.ibm.com/su
VE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://www-01.ibm.com/support/docview.wss?uid=swg27006876 - http://www.securityfocus.com/bid/33700 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK79230 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48524 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK63886 - http://www.vupen.com/english/advisories/2009/0423
CVE ID: CVE-2009-0435 State: PUBLISHED Published: 2009-02-10T22:13:00 Last Updated: 2024-08-07T04:31:26.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the IBM Asynchronous I/O (aka AIO or libibmaio) library in the Java Message Service (JMS) component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.17 on AIX 5.3 allows attackers to cause a denial of service (daemon crash) via vectors related to the aio_getioev2 and getEvent methods. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://www.securityfocus.com/bid/33700 - http://www-01.ibm.com/support/docview.w
m/support/docview.wss?uid=swg27007951 - http://www.securityfocus.com/bid/33700 - http://www-01.ibm.com/support/docview.wss?rs=0&uid=swg24019205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48525
CVE ID: CVE-2009-0436 State: PUBLISHED Published: 2009-02-10T22:13:00 Last Updated: 2024-08-07T04:31:26.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) mod_ibm_ssl and (2) mod_cgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server (WAS), set incorrect permissions for AF_UNIX sockets, which has unknown impact and local attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48526 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK66154 - http://www-01.ibm.com/support/docview.wss?uid=swg27006876 - http://www.securityfocus.com/
/docview.wss?uid=swg1PK66154 - http://www-01.ibm.com/support/docview.wss?uid=swg27006876 - http://www.securityfocus.com/bid/33700 - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://www-01.ibm.com/support/docview.wss?uid=swg27008517 - http://www-01.ibm.com/support/docview.wss?uid=swg27007033