Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
html - http://www.securitytracker.com/id?1023058 - http://secunia.com/advisories/37099 - http://www.securityfocus.com/bid/36746
CVE ID: CVE-2009-20001 State: PUBLISHED Published: 2021-03-07T19:02:20 Last Updated: 2024-08-07T07:32:23.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MantisBT before 2.24.5. It associates a unique cookie string with each user. This string is not reset upon logout (i.e., the user session is still considered valid and active), allowing an attacker who somehow gained access to a user's cookie to login as them. Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/bugs/view.php?id=27976 - https://mantisbt.org/bugs/view.php?id=11296
CVE ID: CVE-2009-20002 State: PUBLISHED Published: 2025-08-21T20:13:17.750Z Last Updated: 2025-08-22T15:24:29.208Z Vendors: Millenium Products: MP3 Studio Problem Types: CWE-121 Description: Millenium MP3 Studio versions up to and including 2.0 is vulnerable to a stack-based buffer overflow when parsing .pls playlist files. The application fails to properly validate the length of the File1 field within the playlist, allowing an attacker to craft a malicious .pls file that overwrites the Structured Exception Handler (SEH) and executes arbitrary code. Exploitation requires the victim to open the file locally, though remote execution may be possible if the .pls extension is registered to the ap
e victim to open the file locally, though remote execution may be possible if the .pls extension is registered to the application and opened via a browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/millenium_mp3_pls.rb - https://www.exploit-db.com/exploits/9618 - https://www.exploit-db.com/exploits/10240 - https://web.archive.org/web/20090731112010/http://www.milw0rm.com/exploits/9277 - https://ccm.net/downloads/sound/5995-millennium-mp3-studio/ - https://www.vulncheck.com/advisories/millenium-mp3-studio-pls-file-stack-based-buffer-overflow
CVE ID: CVE-2009-20003 State: PUBLISHED Published: 2025-08-21T20:15:39.883Z Last Updated: 2025-08-21T20:42:27.958Z Vendors: Xenorate Products: Xenorate Problem Types: CWE-121 Description: Xenorate versions up to and including 2.50, a Windows-based multimedia player, is vulnerable to a stack-based buffer overflow when processing .xpl playlist files. The application fails to properly validate the length of input data, allowing an attacker to craft a malicious .xpl file that overwrites the Structured Exception Handler (SEH) and enables arbitrary code execution. Exploitation requires local interaction, typically by convincing a user to open the crafted file. Additional Analyst Notes: - CISA ADP
quires local interaction, typically by convincing a user to open the crafted file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/xenorate_xpl_bof.rb - https://www.exploit-db.com/exploits/10371 - https://www.exploit-db.com/exploits/10373 - https://www.fortiguard.com/encyclopedia/ips/18035 - http://www.xenorate.com/ - https://web.archive.org/web/20100507021109/http://www.xenorate.com/ - https://www.vulncheck.com/advisories/xenorate-xpl-file-stack-based-buffer-overflow
CVE ID: CVE-2009-20004 State: PUBLISHED Published: 2025-08-21T20:11:57.631Z Last Updated: 2025-08-22T15:28:03.572Z Vendors: gAlan Products: gAlan Problem Types: CWE-121 Description: gAlan 0.2.1, a modular audio processing environment for Windows, is vulnerable to a stack-based buffer overflow when parsing .galan files. The application fails to properly validate the length of input data, allowing a specially crafted file to overwrite the stack and execute arbitrary code. Exploitation requires local interaction, typically by convincing a user to open the malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framewor
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/galan_fileformat_bof.rb - https://www.exploit-db.com/exploits/16664 - https://www.exploit-db.com/exploits/10345 - https://www.exploit-db.com/exploits/10339 - https://www.fortiguard.com/encyclopedia/ips/18034/galan-galan-file-stack-overflow - https://web.archive.org/web/20101210055252/http://galan.sourceforge.net/ - https://www.vulncheck.com/advisories/galan-buffer-overflow
CVE ID: CVE-2009-20005 State: PUBLISHED Published: 2025-09-16T14:32:00.691Z Last Updated: 2025-11-22T12:32:31.038Z Vendors: InterSystems Corporation Products: InterSystems Caché Problem Types: CWE-121 Description: A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1. The vulnerability is triggered by sending a specially crafted HTTP GET request containing an oversized argument to the .csp handler. Due to insufficient bounds checking, the input overflows a stack buffer, allowing an attacker to overwrite control structures and execute arbitrary code. It is unknown if this vulnerability was patched and an affected version range remains undefined.
xecute arbitrary code. It is unknown if this vulnerability was patched and an affected version range remains undefined. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/intersystems_cache.rb - https://www.exploit-db.com/exploits/16807 - https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.APP:INTERSYSTEMS-CACHE-OF.html - https://www.intersystems.com/products/cache/ - https://www.vulncheck.com/advisories/intersystems-cache-stack-buffer-overflow
CVE ID: CVE-2009-20006 State: PUBLISHED Published: 2025-09-16T14:33:40.335Z Last Updated: 2025-11-15T18:01:07.070Z Vendors: osCommerce Products: osCommerce Problem Types: CWE-434 Description: osCommerce versions up to and including 2.2 RC2a contain a vulnerability in its administrative file manager utility (admin/file_manager.php). The interface allows file uploads and edits without sufficient input validation or access control. An unauthenticated attacker can craft a POST request to upload a .php file containing arbitrary code, which is then executed by the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/oscommerce_filemanager.rb - https://www.exploit-db.com/exploits/9556 - https://www.exploit-db.com/exploits/16899 - https://www.oscommerce.com/ - https://www.vulncheck.com/advisories/oscommerce-arbitrary-php-code-execution
CVE ID: CVE-2009-20007 State: PUBLISHED Published: 2025-09-16T14:34:39.071Z Last Updated: 2025-09-16T18:16:31.758Z Vendors: Talkative Products: Talkative IRC Problem Types: CWE-121 Description: Talkative IRC v0.4.4.16 is vulnerable to a stack-based buffer overflow when processing specially crafted response strings sent to a connected client. An attacker can exploit this flaw by sending an overly long message that overflows a fixed-length buffer, potentially leading to arbitrary code execution in the context of the vulnerable process. This vulnerability is exploitable remotely and does not require authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.git
ly and does not require authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/talkative_response.rb - https://www.exploit-db.com/exploits/8227 - https://www.exploit-db.com/exploits/16459 - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2009-4909.php - https://web.archive.org/web/20090116203306/http://www.talkative-irc.com/ - https://www.vulncheck.com/advisories/talkative-irc-response-buffer-overflow
CVE ID: CVE-2009-20008 State: PUBLISHED Published: 2025-08-30T13:47:42.991Z Last Updated: 2025-09-02T20:41:12.953Z Vendors: Zhengzhou Jinhui Computer System Engineering Co. Ltd. ; Beijing Dazheng Human Language Technology Academy Products: Green Dam Youth Escort Problem Types: CWE-121 Description: Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering component, which fails to properly validate input length before copying user-supplied data into a fixed-size buffer. A remote attacker can exploit this vulnerability by enticing a user to visit a specially crafted webpage containing a long URL, r
attacker can exploit this vulnerability by enticing a user to visit a specially crafted webpage containing a long URL, resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20110426190759/http://www.cse.umich.edu/~jhalderm/pub/gd/ - https://en.wikipedia.org/wiki/Green_Dam_Youth_Escort - https://www.exploit-db.com/exploits/8969 - https://www.exploit-db.com/exploits/8938 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/browser/greendam_url.rb - https://www.vulncheck.com/advisories/green-dam-url-processing-buffer-overflow
CVE ID: CVE-2009-20009 State: PUBLISHED Published: 2025-08-30T13:43:21.759Z Last Updated: 2025-11-22T12:31:29.247Z Vendors: Belkin International, Inc. Products: Bulldog Plus UPS Monitoring Software Problem Types: CWE-121 Description: Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service authentication handler. When a specially crafted HTTP request is sent with an oversized Authorization header, the application fails to properly validate the input length before copying it into a fixed-size buffer, resulting in memory corruption and potential remote code execution. Exploitation requires network access and does not require prior aut
mory corruption and potential remote code execution. Exploitation requires network access and does not require prior authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/belkin_bulldog.rb - https://www.exploit-db.com/exploits/8173 - https://www.fortiguard.com/encyclopedia/ips/17325/belkin-bulldog-plus-web-services-buffer-overflow - https://s3.belkin.com/support/dl/bulldogwindows.pdf - https://www.vulncheck.com/advisories/belkin-bulldog-plus-web-service-buffer-overflow
CVE ID: CVE-2009-20010 State: PUBLISHED Published: 2025-08-30T13:47:04.559Z Last Updated: 2025-09-02T20:42:30.150Z Vendors: Dogfood CRM Products: Dogfood CRM Problem Types: CWE-78 Description: Dogfood CRM version 2.0.10 contains a remote command execution vulnerability in the spell.php script used by its mail subsystem. The vulnerability arises from unsanitized user input passed via a POST request to the data parameter, which is processed by the underlying shell without adequate escaping. This allows attackers to inject arbitrary shell commands and execute them on the server. The flaw is exploitable without authentication and was discovered by researcher LSO. Additional Analyst Notes: - CISA
r. The flaw is exploitable without authentication and was discovered by researcher LSO. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/dogfood_spell_exec.rb - https://www.exploit-db.com/exploits/16917 - https://sourceforge.net/projects/dogfood/files/ - https://www.fortiguard.com/encyclopedia/ips/28547/dogfood-crm-spell-remote-command-execution - https://www.vulncheck.com/advisories/dogfood-crm-rce
CVE ID: CVE-2009-20011 State: PUBLISHED Published: 2025-08-30T13:46:00.936Z Last Updated: 2025-09-02T20:43:42.202Z Vendors: ContentKeeper Technologies Products: ContentKeeper Web Appliance Problem Types: CWE-434, CWE-78 Description: ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of file uploads via the mimencode CGI utility. The vulnerability allows unauthenticated attackers to upload and execute arbitrary scripts as the Apache user. Additionally, the exploit can optionally escalate privileges by abusing insecure PATH usage in the benetool binary, resulting in root-level access if su
tionally escalate privileges by abusing insecure PATH usage in the benetool binary, resulting in root-level access if successful. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/http/contentkeeperweb_mimencode.rb - http://www.aushack.com/200904-contentkeeper.txt - https://www.ativion.com/contentkeeper/ - https://web.archive.org/web/20081220084819/http://www.contentkeeper.com/ - https://www.vulncheck.com/advisories/contentkeeper-web-appliance-rce-via-mimencode
CVE ID: CVE-2009-2000 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T05:36:21.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37027 - http://www.securitytracker.com/id?1023057 - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.securityfocus.com/bid/36756 - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
CVE ID: CVE-2009-2001 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T05:36:20.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PL/SQL component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37027 - http://www.securitytracker.com/id?1023057 - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://www.securityfocus.com/bid/36743
CVE ID: CVE-2009-2002 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T05:36:20.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8.1.6, 9.2.3, 10.0.1, 10.2.1, and 10.3.1.0.0 allows remote attackers to affect integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36774 - http://www.securitytracker.com/id?1023062 - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
CVE ID: CVE-2009-2003 State: PUBLISHED Published: 2009-06-08T19:00:00 Last Updated: 2024-08-07T05:36:20.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative access by setting the (1) c7portal and (2) cookname cookies to "admin." Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8668 - http://www.securityfocus.com/bid/34930
CVE ID: CVE-2009-2004 State: PUBLISHED Published: 2009-06-08T19:00:00 Last Updated: 2024-08-07T05:36:20.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in main/mySpace/myStudents.php in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) student and (2) course parameters, a different vector than CVE-2007-2902. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1300 - http://secunia.com/advisories/34879 - http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8 - http://holisticinfosec.org/content/view/112/45/ - http://www.secur
//www.dokeos.com/wiki/index.php/Security#Dokeos_1.8 - http://holisticinfosec.org/content/view/112/45/ - http://www.securityfocus.com/bid/34928 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50501
CVE ID: CVE-2009-2005 State: PUBLISHED Published: 2009-06-08T19:00:00Z Last Updated: 2024-09-16T20:31:53.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1300 - http://secunia.com/advisories/34879 - http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8 - http://holisticinfosec.org/content/view/112/45/ - http://www.securityfocus.com/bid/34928
CVE ID: CVE-2009-2006 State: PUBLISHED Published: 2009-06-08T19:00:00 Last Updated: 2024-08-07T05:36:20.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) search_term parameter to main/auth/courses.php; the (2) frm_title and (3) frm_content parameters in a new personal agenda item action; the (4) title and (5) tutor_name parameters in a new course action; and the (6) student and (7) course parameters to main/mySpace/myStudents.php. NOTE: vectors 2 and 3 might only be exploitable via a separate CSRF vulnerability. Add
s to main/mySpace/myStudents.php. NOTE: vectors 2 and 3 might only be exploitable via a separate CSRF vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50500 - http://www.vupen.com/english/advisories/2009/1300 - http://secunia.com/advisories/34879 - http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50498 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50502 - http://holisticinfosec.org/content/view/112/45/ - http://www.securityfocus.com/bid/34928
CVE ID: CVE-2009-2007 State: PUBLISHED Published: 2009-06-08T19:00:00 Last Updated: 2024-08-07T05:36:20.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to (1) read portions of arbitrary files via a .. (dot dot) and a ..\ (dot dot backslash) in the lang parameter to main/exercice/hotspot_lang_conversion.php and (2) read arbitrary files via a .. (dot dot) in the doc_url parameter to main/exercice/Hpdownload.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50503 - http://www.vupen.com/english/advisori
tainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50503 - http://www.vupen.com/english/advisories/2009/1300 - http://secunia.com/advisories/34879 - http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8 - http://www.securityfocus.com/bid/34928 - http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html
CVE ID: CVE-2009-2008 State: PUBLISHED Published: 2009-06-08T19:00:00 Last Updated: 2024-08-07T05:36:20.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) uInfo parameter to main/tracking/userLog.php and the (2) course parameter to main/mySpace/lp_tracking.php, a different vector than CVE-2009-2006.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1300 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51141 - http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8 -
https://exchange.xforce.ibmcloud.com/vulnerabilities/51141 - http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8 - http://www.securityfocus.com/bid/34928 - http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html
CVE ID: CVE-2009-2009 State: PUBLISHED Published: 2009-06-08T19:00:00 Last Updated: 2024-08-07T05:36:20.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) curdirpath parameter to main/document/slideshow.php and the (2) file parameter to main/exercice/testheaderpage.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1300 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51140 - http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8 - http://www.sec
ge.xforce.ibmcloud.com/vulnerabilities/51140 - http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8 - http://www.securityfocus.com/bid/34928 - http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html
CVE ID: CVE-2009-2010 State: PUBLISHED Published: 2009-06-08T19:00:00 Last Updated: 2024-08-07T05:36:20.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) thread parameter to messageboard.php, (2) member parameter to profile.php, (3) pid parameter to gallery/index.php, and the (4) fcms_login_id cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35039 - http://www.securityfocus.com/bid/34935 - https://www.exploit-db.com/exploits/8671 - http:/
ecunia.com/advisories/35039 - http://www.securityfocus.com/bid/34935 - https://www.exploit-db.com/exploits/8671 - http://www.securityfocus.com/archive/1/503477/100/0/threaded - http://www.vupen.com/english/advisories/2009/1306
CVE ID: CVE-2009-2011 State: PUBLISHED Published: 2009-06-16T20:26:00 Last Updated: 2024-08-07T05:36:20.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a .dxstudio file that invokes this method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35402 - http://www.securityfocus.com/bid/35273 - http://www.securityfocus.com/archive/1/504195/100/0/threaded - http://ww
5402 - http://www.securityfocus.com/bid/35273 - http://www.securityfocus.com/archive/1/504195/100/0/threaded - http://www.coresecurity.com/content/DXStudio-player-firefox-plugin - http://www.dxstudio.com/forumtopic.aspx?topicid=b4152459-fb5f-4933-b700-b3fbd54f6bfd - http://www.vupen.com/english/advisories/2009/1561 - https://www.exploit-db.com/exploits/8922 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51035
CVE ID: CVE-2009-2012 State: PUBLISHED Published: 2009-06-09T17:00:00 Last Updated: 2024-08-07T05:36:20.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in idmap in Sun OpenSolaris snv_88 through snv_110, when a CIFS server is enabled, allows local users to cause a denial of service (idpmapd daemon crash and idmapd outage) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-260508-1 - http://www.securityfocus.com/bid/35252 - http://www.vupen.com/english/advisories/2009/1519