Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1612 State: PUBLISHED Published: 2009-05-11T20:00:00 Last Updated: 2024-08-07T05:20:33.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 3.09.04.17 and earlier are also affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8579 - http://www.securi
ional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8579 - http://www.securityfocus.com/bid/34789 - http://secunia.com/advisories/34944 - http://www.cisrt.org/enblog/read.php?245
CVE ID: CVE-2009-1613 State: PUBLISHED Published: 2009-05-11T20:00:00 Last Updated: 2024-08-07T05:20:34.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchterm or (2) email parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8576 - https://www.exploit-db.com/exploits/8577 - http://secunia.com/advisories/34943
CVE ID: CVE-2009-1614 State: PUBLISHED Published: 2009-05-11T20:00:00 Last Updated: 2024-08-07T05:20:34.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the msg parameter (aka the message in an article comment) or (2) the searchterm parameter (aka the search post form). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8577 - http://secunia.com/advisories/34943
CVE ID: CVE-2009-1615 State: PUBLISHED Published: 2009-05-11T20:00:00 Last Updated: 2024-08-07T05:20:34.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Leap CMS 0.1.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via an admin.system.files (aka Manage Files) request to the default URI, then accessing the file via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8577
CVE ID: CVE-2009-1616 State: PUBLISHED Published: 2009-05-11T20:00:00Z Last Updated: 2024-09-16T22:08:47.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34961 - http://forum.coppermine-gallery.net/index.php/topic%2C59247.0.html - http://forum.coppermine-gallery.net/index.php/topic%2C59237.0.html - http://www.securityfocus.com/bid/34782 - http://osvdb.or
//forum.coppermine-gallery.net/index.php/topic%2C59237.0.html - http://www.securityfocus.com/bid/34782 - http://osvdb.org/54145
CVE ID: CVE-2009-1617 State: PUBLISHED Published: 2009-05-12T16:00:00 Last Updated: 2024-08-07T05:20:34.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teraway LinkTracker 1.0 allows remote attackers to bypass authentication and gain administrative access via a userid=1&lvl=1 value for the twLTadmin cookie. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34903 - https://www.exploit-db.com/exploits/8550 - http://www.securityfocus.com/bid/34735
CVE ID: CVE-2009-1618 State: PUBLISHED Published: 2009-05-12T16:00:00 Last Updated: 2024-08-07T05:20:35.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teraway LiveHelp 2.0 allows remote attackers to bypass authentication and gain administrative access via a pwd=&lvl=1&usr=&alias=admin&userid=1 value for the TWLHadmin cookie. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34802 - http://www.securityfocus.com/bid/34735 - https://www.exploit-db.com/exploits/8552
CVE ID: CVE-2009-1619 State: PUBLISHED Published: 2009-05-12T16:00:00 Last Updated: 2024-08-07T05:20:34.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teraway FileStream 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the twFSadmin cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34818 - https://www.exploit-db.com/exploits/8551 - http://www.securityfocus.com/bid/34735
CVE ID: CVE-2009-1620 State: PUBLISHED Published: 2009-05-12T16:00:00 Last Updated: 2024-08-07T05:20:34.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in input.php in MataChat allow remote attackers to inject arbitrary web script or HTML via the (1) nickname and (2) color parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/503014/100/0/threaded - http://www.securityfocus.com/bid/34722
CVE ID: CVE-2009-1621 State: PUBLISHED Published: 2009-05-12T16:00:00 Last Updated: 2024-08-07T05:20:34.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the route parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8539 - http://www.securityfocus.com/bid/34724 - http://www.securityfocus.com/archive/1/532233/100/0/threaded - http://secunia.com/advisories/34313
CVE ID: CVE-2009-1622 State: PUBLISHED Published: 2009-05-12T16:00:00 Last Updated: 2024-08-07T05:20:34.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via the order_sn parameter in an order_query action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8548 - http://www.securityfocus.com/bid/34733
CVE ID: CVE-2009-1623 State: PUBLISHED Published: 2009-05-12T16:00:00 Last Updated: 2024-08-07T05:20:34.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to inject arbitrary web script or HTML via the PID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34732 - https://www.exploit-db.com/exploits/8545
CVE ID: CVE-2009-1624 State: PUBLISHED Published: 2009-05-12T16:00:00 Last Updated: 2024-08-07T05:20:34.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the show parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34732 - https://www.exploit-db.com/exploits/8545
CVE ID: CVE-2009-1625 State: PUBLISHED Published: 2009-05-12T16:00:00 Last Updated: 2024-08-07T05:20:34.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ln parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34741 - https://www.exploit-db.com/exploits/8546 - http://secunia.com/advisories/34906
CVE ID: CVE-2009-1626 State: PUBLISHED Published: 2009-05-12T16:00:00 Last Updated: 2024-08-07T05:20:34.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=678562&group_id=243152 - https://www.exploit-db.com/exploits/8547 - http://www.securityfocus.com/bid/34729
CVE ID: CVE-2009-1627 State: PUBLISHED Published: 2009-05-12T16:00:00 Last Updated: 2024-08-07T05:20:34.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Streaming Download Project (SDP) Downloader 2.3.0 allows remote attackers to execute arbitrary code via a long .asf URL in the HREF attribute of a REF element in a .asx file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8531 - http://www.securityfocus.com/bid/34712 - https://www.exploit-db.com/exploits/8536 - http://osvdb.org/54090 - http://secunia.com/advisories/34883 - http://www.vupen.com/english/advisories/2009/1171
CVE ID: CVE-2009-1628 State: PUBLISHED Published: 2009-06-26T18:00:00Z Last Updated: 2024-09-16T19:05:07.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in mnet.exe in Unisys Business Information Server (BIS) 10 and 10.1 on Windows allows remote attackers to execute arbitrary code via a crafted TCP packet. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=808 - ftp://ftp.support.unisys.com/pub/mapper/NT/BIS10.1/Readme.txt
CVE ID: CVE-2009-1629 State: PUBLISHED Published: 2009-05-14T17:00:00 Last Updated: 2024-08-07T05:20:34.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScript functions, which makes it easier for remote attackers to (1) hijack a session or (2) cause a denial of service (session ID exhaustion) via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/503421/100/0/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052655.html - http://www.openwall.com/lists/oss-
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052655.html - http://www.openwall.com/lists/oss-security/2009/05/11/1 - http://www.ocert.org/advisories/ocert-2009-004.html - http://www.securityfocus.com/bid/34903 - http://secunia.com/advisories/42784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50464
CVE ID: CVE-2009-1630 State: PUBLISHED Published: 2009-05-14T17:00:00 Last Updated: 2024-08-07T05:20:34.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:135 - http://www.debian.org/security/2009/dsa-1865 - http://wiki.rpath.com/Advi
.com/security/advisories?name=MDVSA-2009:135 - http://www.debian.org/security/2009/dsa-1865 - http://wiki.rpath.com/Advisories:rPSA-2009-0111 - http://article.gmane.org/gmane.linux.nfs/26592 - http://www.securityfocus.com/bid/34934 - http://secunia.com/advisories/37471 - http://linux-nfs.org/pipermail/nfsv4/2006-November/005313.html - http://www.openwall.com/lists/oss-security/2009/05/13/2 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:148 - http://secunia.com/advisories/35656 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9990 - http://www.debian.org/security/2009/dsa-1844 - http://www.vmware.com/security/advisories/VMSA-2009-0016.htm
def%3A9990 - http://www.debian.org/security/2009/dsa-1844 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.vupen.com/english/advisories/2009/1331 - http://www.redhat.com/support/errata/RHSA-2009-1157.html - https://bugzilla.redhat.com/show_bug.cgi?id=500297 - http://secunia.com/advisories/35106 - http://www.securityfocus.com/archive/1/505254/100/0/threaded - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/36051 - http://secunia.com/advisories/35298 - http://secunia.com/advisories/36327 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8543 - http://lists.opensuse.org/opensuse-secur
isecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8543 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html - http://bugzilla.linux-nfs.org/show_bug.cgi?id=131 - http://www.ubuntu.com/usn/usn-793-1 - http://linux-nfs.org/pipermail/nfsv4/2006-November/005323.html - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html - http://www.vupen.com/english/advisories/2009/3316 - http://secunia.com/advisories/35394 - http://www.debian.org/security/2009/dsa-1809 - http://secunia.com/advisories/35847
CVE ID: CVE-2009-1631 State: PUBLISHED Published: 2009-05-14T17:00:00 Last Updated: 2024-08-07T05:20:34.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526409 - https://bugzilla.redhat.com/show_bug.cgi?id=498648 - http://bugzilla.gnome.org/show_bug.cgi?id=581604 - http://www.securityfocus.com/bid/3
edhat.com/show_bug.cgi?id=498648 - http://bugzilla.gnome.org/show_bug.cgi?id=581604 - http://www.securityfocus.com/bid/34921 - http://www.openwall.com/lists/oss-security/2009/05/12/6
CVE ID: CVE-2009-1632 State: PUBLISHED Published: 2009-05-14T17:00:00 Last Updated: 2024-08-07T05:20:34.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in src/racoon/crypto_openssl.c; and (2) the NAT-Traversal (aka NAT-T) keepalive implementation, related to src/racoon/nattraversal.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-785-1 - http://sourceforge.net/proje
Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-785-1 - http://sourceforge.net/project/shownotes.php?group_id=74601&release_id=677611 - http://secunia.com/advisories/35159 - http://marc.info/?l=oss-security&m=124101704828036&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:114 - http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/crypto_openssl.c - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10581 - http://www.securityfocus.com/bid/34765 - http://www.redhat.com/support/errata/RHSA-2009-1036.html - http://secunia.com/advisories/35404 - http://secunia.com/advisories/35212 - ht
.com/support/errata/RHSA-2009-1036.html - http://secunia.com/advisories/35404 - http://secunia.com/advisories/35212 - http://security.gentoo.org/glsa/glsa-200905-03.xml - http://secunia.com/advisories/35685 - http://www.openwall.com/lists/oss-security/2009/05/12/3 - https://trac.ipsec-tools.net/ticket/303 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://www.vupen.com/english/advisories/2009/3184 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/nattraversal.c - http://secunia.com/advisories/35153 - http://lists.apple.com/archives/security-announce/2009/Nov/msg0000
attraversal.c - http://secunia.com/advisories/35153 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://sourceforge.net/mailarchive/forum.php?thread_name=20090422151825.GB46988%40zeninc.net&forum_name=ipsec-tools-announce - http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/nattraversal.c.diff?r1=1.6&r2=1.6.6.1&f=h - http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/crypto_openssl.c.diff?r1=1.11.6.4&r2=1.11.6.5&f=h - http://www.debian.org/security/2009/dsa-1804 - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-1633 State: PUBLISHED Published: 2009-05-28T20:14:00 Last Updated: 2024-08-07T05:20:34.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service (memory corruption) and possibly have unspecified other impact via (1) a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or (2) long Unicode characters, related to fs/cifs/cifssmb.c and the cifs_readdir function in fs/cifs/readdir.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1865 - http://wi
dditional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1865 - http://wiki.rpath.com/Advisories:rPSA-2009-0111 - http://secunia.com/advisories/35226 - http://www.openwall.com/lists/oss-security/2009/05/14/1 - http://secunia.com/advisories/37471 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8588 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=27b87fe52baba0a55e9723030e76fce94fabcea4 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:148 - http://secunia.com/advisories/35656 - htt
e94fabcea4 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:148 - http://secunia.com/advisories/35656 - http://www.debian.org/security/2009/dsa-1844 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.openwall.com/lists/oss-security/2009/05/15/2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9525 - http://secunia.com/advisories/37351 - http://marc.info/?l=oss-security&m=124099284225229&w=2 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html - http://www.redhat.com/support/errata/RHSA-2009-1157.html - http://www.s
ensuse-security-announce/2010-02/msg00005.html - http://www.redhat.com/support/errata/RHSA-2009-1157.html - http://www.securityfocus.com/bid/34612 - http://www.securityfocus.com/archive/1/505254/100/0/threaded - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/36051 - http://secunia.com/advisories/35298 - http://secunia.com/advisories/36327 - http://www.ubuntu.com/usn/usn-793-1 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01271.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.4 - http://marc.info/?l=oss-security&m=124099371726547&w=2 - http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=com
marc.info/?l=oss-security&m=124099371726547&w=2 - http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commit%3Bh=7b0c8fcff47a885743125dd843db64af41af5a61 - http://secunia.com/advisories/35217 - https://bugzilla.redhat.com/show_bug.cgi?id=496572 - http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commit%3Bh=968460ebd8006d55661dec0fb86712b40d71c413 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html - http://www.vupen.com/english/advisories/2009/3316 - http://www.debian.org/security/2009/dsa-1809 - http://secunia.com/advisories/35847 - http://www.openwall.com/lists/oss-security/2009/05/14/4
CVE ID: CVE-2009-1634 State: PUBLISHED Published: 2009-05-26T15:16:00 Last Updated: 2024-08-07T05:20:35.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1393 - http://secunia.com/advisories/35177 - http://www.novell.com/support/viewContent.do?externalId=7003266&sliceId=1 - http://www.securityfocus.com/bid/35066 - https://exchange.xforce.ibm
pport/viewContent.do?externalId=7003266&sliceId=1 - http://www.securityfocus.com/bid/35066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50688 - https://bugzilla.novell.com/show_bug.cgi?id=472979
CVE ID: CVE-2009-1635 State: PUBLISHED Published: 2009-05-22T16:25:00 Last Updated: 2024-08-07T05:20:34.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to inject arbitrary web script or HTML via (1) the User.lang parameter to the login page (aka gw/webacc), (2) style expressions in a message that contains an HTML file, or (3) vectors associated with incorrect protection mechanisms against scripting, as demonstrated using whitespace between JavaScript event names and values. Additional Analyst Notes: - CVE Program
ng, as demonstrated using whitespace between JavaScript event names and values. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50689 - http://www.novell.com/support/viewContent.do?externalId=7003268&sliceId=1 - http://www.vupen.com/english/advisories/2009/1393 - https://bugzilla.novell.com/show_bug.cgi?id=484942 - http://www.securityfocus.com/archive/1/503885/100/0/threaded - http://secunia.com/advisories/35177 - https://bugzilla.novell.com/show_bug.cgi?id=472987 - http://packetstorm.linuxsecurity.com/0905-exploits/groupwise-xss.txt - http://www.novell.com/support/search.do?cmd=displayKC&externalId=7003271 - http://www.se
05-exploits/groupwise-xss.txt - http://www.novell.com/support/search.do?cmd=displayKC&externalId=7003271 - http://www.securityfocus.com/bid/35061 - http://securitytracker.com/id?1022267 - http://www.securityfocus.com/archive/1/503700/100/0/threaded - https://bugzilla.novell.com/show_bug.cgi?id=474500 - http://www.securityfocus.com/bid/35066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50691 - http://www.novell.com/support/viewContent.do?externalId=7003267&sliceId=1
CVE ID: CVE-2009-1636 State: PUBLISHED Published: 2009-05-26T15:16:00 Last Updated: 2024-08-07T05:20:35.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Internet Agent (aka GWIA) component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary code via (1) a crafted e-mail address in an SMTP session or (2) an SMTP command. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1393 - https://bugzilla.novell.com/show_bug.cgi?id=482914 - http://www.vupen.com/exploits/Novell_GroupWise_GWIA_SMTP_Command_Remote_Buffer_Overflow_PoC_Exploit_13931