Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4412 State: PUBLISHED Published: 2009-12-24T16:00:00 Last Updated: 2024-08-07T07:01:20.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Serendipity before 1.5 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/12/21/1 - http://osvdb.org/61245 - https://exchange.xforce.ibmcl
nces: - http://www.openwall.com/lists/oss-security/2009/12/21/1 - http://osvdb.org/61245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54985 - http://www.vupen.com/english/advisories/2009/3626 - http://secunia.com/advisories/37830 - http://blog.s9y.org/archives/211-Serendipity-1.5-released.html
CVE ID: CVE-2009-4413 State: PUBLISHED Published: 2009-12-24T16:00:00 Last Updated: 2024-08-07T07:01:20.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a negative value, and a segmentation fault. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37463 - http://www.openwall.com/lists/oss-security/2009/12/12/4 - http://secunia.com/advisori
/www.securityfocus.com/bid/37463 - http://www.openwall.com/lists/oss-security/2009/12/12/4 - http://secunia.com/advisories/38647 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560779 - http://secunia.com/advisories/37607 - http://www.exploit-db.com/exploits/10338 - http://www.debian.org/security/2010/dsa-2002
CVE ID: CVE-2009-4414 State: PUBLISHED Published: 2009-12-24T16:00:00 Last Updated: 2024-08-07T07:01:20.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in phpgwapi /inc/class.auth_sql.inc.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the passwd parameter to login.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35761 - http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG?r1=17045&r2=19117&pathrev=19117&sortby=date&root=phpgroupware -
vc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG?r1=17045&r2=19117&pathrev=19117&sortby=date&root=phpgroupware - http://www.osvdb.org/56178 - http://svn.savannah.gnu.org/viewvc?view=rev&root=phpgroupware&sortby=date&revision=19117 - http://secunia.com/advisories/35519 - http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/inc/class.auth_sql.inc.php?r1=14407&r2=19117&pathrev=19117&sortby=date&root=phpgroupware - https://exchange.xforce.ibmcloud.com/vulnerabilities/51922 - http://www.openwall.com/lists/oss-security/2009/12/20/1
CVE ID: CVE-2009-4415 State: PUBLISHED Published: 2009-12-24T16:00:00 Last Updated: 2024-08-07T07:01:20.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, allow remote attackers to (1) read arbitrary files via the csvfile parameter to addressbook/csv_import.php, or (2) include and execute arbitrary local files via the conv_type parameter in addressbook/inc/class.uiXport.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35761 - http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/C
ttp://www.securityfocus.com/bid/35761 - http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG?r1=17045&r2=19117&pathrev=19117&sortby=date&root=phpgroupware - https://exchange.xforce.ibmcloud.com/vulnerabilities/51924 - http://www.osvdb.org/56180 - http://svn.savannah.gnu.org/viewvc?view=rev&root=phpgroupware&sortby=date&revision=19117 - http://secunia.com/advisories/35519 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51921 - http://www.osvdb.org/56177 - http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/csv_import.php?r1=15464&r2=19117&pathrev=19117&sortby=date&root=phpgroupware - http://svn.savannah.gnu.org/viewvc/branch
csv_import.php?r1=15464&r2=19117&pathrev=19117&sortby=date&root=phpgroupware - http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/inc/class.uiXport.inc.php?r1=14819&r2=19117&pathrev=19117&sortby=date&root=phpgroupware - http://www.openwall.com/lists/oss-security/2009/12/20/1
CVE ID: CVE-2009-4416 State: PUBLISHED Published: 2009-12-24T16:00:00 Last Updated: 2024-08-07T07:01:20.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter whose name begins with the "phpgw_" sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35761 - http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG?r1=17045&r2=19117&pathrev=19117&sortby=date&root=phpgroupware - http://sv
s/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG?r1=17045&r2=19117&pathrev=19117&sortby=date&root=phpgroupware - http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/login.php?r1=19063&r2=19117&pathrev=19117&sortby=date&root=phpgroupware - http://svn.savannah.gnu.org/viewvc?view=rev&root=phpgroupware&sortby=date&revision=19117 - http://secunia.com/advisories/35519 - http://kambing.ui.ac.id/gentoo-portage/www-apps/phpgroupware/files/phpgroupware-SA35519.patch - https://exchange.xforce.ibmcloud.com/vulnerabilities/51923 - http://www.openwall.com/lists/oss-security/2009/12/20/1 - http://www.osvdb.org/56179
CVE ID: CVE-2009-4417 State: PUBLISHED Published: 2009-12-24T17:00:00Z Last Updated: 2024-09-16T22:01:33.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows context-dependent attackers to send arbitrary e-mail messages to any recipient address via vectors related to "events not yet mailed." Additional Analyst Notes: - CVE Program Container: References: - http://www.suspekt.org/2009/12/09/advisory-032009-piwik-cookie-unserialize-vulnerability/ - http://www.sektioneins.de/en/advisories/advisory-032009-piwik-cookie-unserialize-vulnerability/
CVE ID: CVE-2009-4418 State: PUBLISHED Published: 2009-12-24T17:00:00Z Last Updated: 2024-09-17T02:36:19.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unserialize function in PHP 5.3.0 and earlier allows context-dependent attackers to cause a denial of service (resource consumption) via a deeply nested serialized variable, as demonstrated by a string beginning with a:1: followed by many {a:1: sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.suspekt.org/downloads/POC2009-ShockingNewsInPHPExploitation.pdf - http://www.suspekt.org/2009/11/28/shocking-news-in-php-exploitation/
CVE ID: CVE-2009-4419 State: PUBLISHED Published: 2009-12-24T17:00:00 Last Updated: 2024-08-07T07:01:20.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM), which allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region, which prevents the SENTER instruction from properly applying VT-d protection while an MLE is being loaded. Additional Analyst Notes: - CVE Program Container: References: - http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-0002
alyst Notes: - CVE Program Container: References: - http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00021&languageid=en-fr - http://www.securitytracker.com/id?1023382 - http://www.securityfocus.com/bid/37430 - http://osvdb.org/61248 - http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf - http://www.vupen.com/english/advisories/2009/3618 - http://secunia.com/advisories/37900 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54963 - http://theinvisiblethings.blogspot.com/2009/12/another-txt-attack.html
CVE ID: CVE-2009-4420 State: PUBLISHED Published: 2009-12-24T17:00:00 Last Updated: 2024-08-07T07:01:20.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager (ASM) 9.4.4 through 9.4.7 and 10.0.0 through 10.0.1, and Protocol Security Manager (PSM) 9.4.5 through 9.4.7 and 10.0.0 through 10.0.1, allows remote attackers to cause a denial of service (crash) via unknown vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1023386 - https://support.f5.com/kb/en-us/solutions/public/1
Container: References: - http://www.securitytracker.com/id?1023386 - https://support.f5.com/kb/en-us/solutions/public/10000/400/sol10417.html - http://osvdb.org/61297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55005 - http://www.vupen.com/english/advisories/2009/3627 - http://secunia.com/advisories/37805 - http://www.securityfocus.com/bid/37452
CVE ID: CVE-2009-4421 State: PUBLISHED Published: 2009-12-24T17:00:00 Last Updated: 2024-08-07T07:01:20.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in languages_cgi.php in Simple PHP Blog 0.5.1 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the blog_language1 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37434 - http://www.securityfocus.com/archive/1/508546/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0398.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54970
CVE ID: CVE-2009-4422 State: PUBLISHED Published: 2009-12-24T17:00:00 Last Updated: 2024-08-07T07:01:20.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the GetURLArguments function in jpgraph.php in Aditus Consulting JpGraph 3.0.6 allow remote attackers to inject arbitrary web script or HTML via a key to csim_in_html_ex1.php, and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37483 - http://www.securityfocus.com/archive/1/508586/100/0/threaded - http://secunia.com/advisories/37832 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:340
6/100/0/threaded - http://secunia.com/advisories/37832 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:340 - http://osvdb.org/61268
CVE ID: CVE-2009-4423 State: PUBLISHED Published: 2009-12-24T17:00:00 Last Updated: 2024-08-07T07:01:19.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in weenCompany 4.0.0 allows remote attackers to execute arbitrary SQL commands via the moduleid parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54996 - http://osvdb.org/61264 - http://secunia.com/advisories/37895 - http://packetstormsecurity.org/0912-exploits/weencompany-sql.txt - http://www.exploit-db.com/exploits/10606
CVE ID: CVE-2009-4424 State: PUBLISHED Published: 2009-12-28T18:27:00 Last Updated: 2024-08-07T07:01:20.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in results.php in the Pyrmont plugin 2 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0912-exploits/wppyrmont-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/54907 - http://www.exploit-db.com/exploits/10535 - http://www.securityfocus.com/bid/37409
CVE ID: CVE-2009-4425 State: PUBLISHED Published: 2009-12-28T18:27:00 Last Updated: 2024-08-07T07:01:20.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in iDevCart 1.09 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter in a browse action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54906 - http://packetstormsecurity.org/0912-exploits/idevcart-xss.txt - http://www.osvdb.org/61069 - http://secunia.com/advisories/37767 - http://www.exploit-db.com/exploits/10490
CVE ID: CVE-2009-4426 State: PUBLISHED Published: 2009-12-28T18:27:00 Last Updated: 2024-08-07T07:01:20.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Ignition 1.2, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the blog parameter to (1) comment.php and (2) view.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0912-exploits/ignition-lfi.txt - http://osvdb.org/61226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54940 - http://osvdb.org/61225 - http://www.exploit-db.com/exploits/10569 - http:/
e.xforce.ibmcloud.com/vulnerabilities/54940 - http://osvdb.org/61225 - http://www.exploit-db.com/exploits/10569 - http://secunia.com/advisories/37836
CVE ID: CVE-2009-4427 State: PUBLISHED Published: 2009-12-28T18:27:00 Last Updated: 2024-08-07T07:01:20.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cmd parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:023 - http://www.osvdb.org/61139 - http://secunia.com/advisories/37848 - http://www.exploit-db.com/exploits/10410 - http://www.securityfocus.com/bid/37327
CVE ID: CVE-2009-4428 State: PUBLISHED Published: 2009-12-28T18:27:00 Last Updated: 2024-08-07T07:01:20.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JoomPortfolio (com_joomportfolio) component 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the secid parameter in a showcat action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37403 - http://packetstormsecurity.org/0912-exploits/joomlaportfolio-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/54912 - http://secunia.com/advisories/37838 - http://osvdb.org/61138
CVE ID: CVE-2009-4429 State: PUBLISHED Published: 2009-12-28T18:27:00 Last Updated: 2024-08-07T07:01:20.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal allows remote authenticated users with "administer sections" privileges to inject arbitrary web script or HTML via a section name (aka the Name field). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37371 - http://www.osvdb.org/61107 - http://secunia.com/advisories/37752 - http://www.madirish.net/?article=440 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
ecunia.com/advisories/37752 - http://www.madirish.net/?article=440 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54860 - http://drupal.org/node/661404
CVE ID: CVE-2009-4430 State: PUBLISHED Published: 2009-12-28T18:27:00 Last Updated: 2024-08-07T07:01:20.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in VirtueMart 1.0 allows remote attackers to execute arbitrary SQL commands via the product_id parameter in a shop.product_details shop.flypage action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10533 - http://www.securityfocus.com/bid/37317
CVE ID: CVE-2009-4431 State: PUBLISHED Published: 2009-12-28T18:27:00Z Last Updated: 2024-09-16T18:24:45.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in cal_popup.php in the Anything Digital Development JCal Pro (aka com_jcalpro or JCP) component 1.5.3.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37438 - http://packetstormsecurity.org/0912-exploits/joomlajcalpro-rfi.txt
CVE ID: CVE-2009-4432 State: PUBLISHED Published: 2009-12-28T18:27:00 Last Updated: 2024-08-07T07:01:20.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CodeMight VideoCMS 3.1 allows remote attackers to execute arbitrary SQL commands via the v parameter in a video action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37889 - http://packetstormsecurity.org/0912-exploits/videocms-sql.txt - http://www.exploit-db.com/exploits/10586
CVE ID: CVE-2009-4433 State: PUBLISHED Published: 2009-12-28T18:27:00 Last Updated: 2024-08-07T07:01:20.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (a) 5 or (b) 9 field in a post action to ticket_function.php, reachable through ticket_submit.php and index.php; (c) the which parameter to function.php, or (d) the which parameter to index.php, related to knowledgebase_list.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://
ails are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/61112 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54859 - http://packetstormsecurity.org/0912-exploits/isupport-lfixss.txt - http://www.exploit-db.com/exploits/10478 - http://www.securityfocus.com/bid/37380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54858 - http://www.osvdb.org/61111 - http://secunia.com/advisories/37726 - http://www.osvdb.org/61109
CVE ID: CVE-2009-4434 State: PUBLISHED Published: 2009-12-28T18:27:00 Last Updated: 2024-08-07T07:01:20.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the include_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0912-exploits/isupport-lfixss.txt - http://www.osvdb.org/61110 - http://www.exploit-db.com/exploits/10478 - http://secunia.com/advisories/37726
CVE ID: CVE-2009-4435 State: PUBLISHED Published: 2009-12-28T18:27:00 Last Updated: 2024-08-07T07:01:20.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[nlang] parameter to (1) mod/poll.php and (2) mod/new.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37408 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54908 - http://www.exploit-db.com/exploits/10536 - http://packetstormsecurity.org/0912-exploits/f3site2009-lfi.txt
CVE ID: CVE-2009-4436 State: PUBLISHED Published: 2009-12-28T18:27:00 Last Updated: 2024-08-07T07:01:20.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp, different vectors than CVE-2007-1706. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37402 - http://www.exploit-db.com/exploits/10529 - http://secunia.com/advisories/24653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54892
CVE ID: CVE-2009-4437 State: PUBLISHED Published: 2009-12-28T18:27:00 Last Updated: 2024-08-07T07:01:20.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to wishlist.asp and the (2) linkid parameter to links.asp. NOTE: vector 1 might overlap CVE-2005-1029.1. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0912-exploits/activeauctionhouse-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/54891 - http://www.securityfocus.com/bid/37401 - http://www.exploit-db.com/exploits
.xforce.ibmcloud.com/vulnerabilities/54891 - http://www.securityfocus.com/bid/37401 - http://www.exploit-db.com/exploits/10520 - http://secunia.com/advisories/14839
CVE ID: CVE-2009-4438 State: PUBLISHED Published: 2009-12-28T19:00:00Z Last Updated: 2024-09-17T00:31:31.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not enforce privilege requirements for access to a (1) sequence or (2) global-variable object, which allows remote authenticated users to make use of data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg1IC64852 - http://www-01.
es/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg1IC64852 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC62583 - http://www-01.ibm.com/support/docview.wss?uid=swg21293566 - http://www.vupen.com/english/advisories/2009/3520 - http://www.securityfocus.com/bid/37332 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC62543 - http://www-01.ibm.com/support/docview.wss?uid=swg21412902 - http://secunia.com/advisories/37759
CVE ID: CVE-2009-4439 State: PUBLISHED Published: 2009-12-28T19:00:00Z Last Updated: 2024-09-16T18:59:22.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (instance crash) by compiling a SQL query. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg21293566 - http://www.vupen.com/english/advisories/2009/3520 - http://www.securityfocus.com/bid/37332 - http://
s?uid=swg21293566 - http://www.vupen.com/english/advisories/2009/3520 - http://www.securityfocus.com/bid/37332 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR31948 - http://www-01.ibm.com/support/docview.wss?uid=swg21412902 - http://secunia.com/advisories/37759