deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-2089
Published: 2009-08-13
Description: The Migration component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, when tracing is enabled and a 6.1 to 7.0 migration has occurred, allows remote authenticated users to obtain sensitive information by reading a Migration Trace file.
CVSS Score: 2.1 (LOW)
CWE: CWE-16
References: http://www-01.ibm.com/support/docview.wss?uid=swg27007951; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www-1.ibm.com/support/docview.wss?uid=swg1PK80337
CVE: CVE-2009-2090
Published: 2009-08-13
Description: Unspecified vulnerability in wsadmin in the System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 allows remote attackers to bypass intended Java Management Extensions (JMX) Management Beans (aka MBeans) access restrictions, and cause a denial of service (daemon stop), via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/34461; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www-1.ibm.com/support/docview.wss?uid=swg1PK86328
CVE: CVE-2009-2091
Published: 2009-08-13
Description: The System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 on z/OS uses weak file permissions for new applications, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/34461; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www-1.ibm.com/support/docview.wss?uid=swg1PK83308
CVE: CVE-2009-2092
Published: 2009-08-13
Description: IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 does not properly read the portletServingEnabled parameter in ibm-portlet-ext.xmi, which allows remote attackers to bypass intended access restrictions via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://secunia.com/advisories/34461; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www-1.ibm.com/support/docview.wss?uid=swg1PK89385
CVE: CVE-2009-2093
Published: 2009-08-13
Description: SQL injection vulnerability in the console in IBM WebSphere Partner Gateway (WPG) Enterprise 6.0 before FP8, 6.1 before FP3, 6.1.1 before FP2, and 6.2 before FP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/36295; http://www-01.ibm.com/support/docview.wss?uid=swg21382117; http://www-1.ibm.com/support/docview.wss?uid=swg1JR32386
CVE: CVE-2009-2094
Published: 2009-08-13
Description: Unspecified vulnerability in IBM WebSphere Commerce 6.0 Enterprise before 6.0.0.8, when trace is enabled, allows local users to obtain sensitive information via unknown vectors.
CVSS Score: 1.5 (LOW)
References: http://publib.boulder.ibm.com/infocenter/wchelp/v6r0m0/topic/com.ibm.commerce.admin.doc/refs/rig_new_and_changed.htm; http://www-1.ibm.com/support/docview.wss?uid=swg1LI74286; https://exchange.xforce.ibmcloud.com/vulnerabilities/52398
CVE: CVE-2008-6974
Published: 2009-08-14
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary commands via the ping_ip parameter; (2) change the administrative credentials via the http_username and http_passwd parameters; (3) enable remote administration via the remote_management parameter; or (4) configure port forwarding via certain from, to, ip, and pro parameters.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173; http://www.securityfocus.com/archive/1/499024; http://www.securityfocus.com/archive/1/499119
CVE: CVE-2008-6975
Published: 2009-08-14
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary commands via the ping_ip parameter; (2) change the administrative credentials via the http_username and http_passwd parameters; (3) enable remote administration via the remote_management parameter; or (4) configure port forwarding via certain from, to, ip, and pro parameters.  NOTE: This issue reportedly exists because of a "weak ... anti-CSRF fix" implemented in 24 sp2.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173; http://www.securityfocus.com/archive/1/499024; http://www.securityfocus.com/archive/1/499119
CVE: CVE-2009-1048
Published: 2009-08-14
Description: The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a (1) http or (2) https request with 127.0.0.1 in the Host header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-290
References: http://secunia.com/advisories/36293; http://www.csnc.ch/misc/files/advisories/cve-2009-1048.txt; http://www.securityfocus.com/archive/1/505723/100/0/threaded
CVE: CVE-2009-2417
Published: 2009-08-14
Description: lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://curl.haxx.se/CVE-2009-2417/curl-7.10.6-CVE-2009-2417.patch; http://curl.haxx.se/CVE-2009-2417/curl-7.11.0-CVE-2009-2417.patch; http://curl.haxx.se/CVE-2009-2417/curl-7.12.1-CVE-2009-2417.patch
CVE: CVE-2009-2677
Published: 2009-08-14
Description: Cross-site request forgery (CSRF) vulnerability in HP Insight Control Suite For Linux (aka ICE-LX) before 2.11 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2557&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/52464; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2557&w=2
CVE: CVE-2009-2691
Published: 2009-08-14
Description: The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps and (2) smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=00f89d218523b9bf6b522349c039d5ac80aa536d; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13f0feafa6b8aead57a2a328e2fca6a5828bf286; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=704b836cbf19e885f8366bccb2e4b0474346c02d
CVE: CVE-2009-2692
Published: 2009-08-14
Description: The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
CVSS Score: 7.8 (HIGH)
CWE: CWE-908
References: http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0174.html; http://blog.cr0.org/2009/08/linux-null-pointer-dereference-due-to.html; http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=c18d0fe535a73b219f960d1af3d0c264555a12e3
CVE: CVE-2009-2764
Published: 2009-08-14
Description: Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote attackers to cause a denial of service (application crash) via a certain DIV element in conjunction with SCRIPT elements that have empty contents and no reference to a valid external script location.
CVSS Score: 5.0 (MEDIUM)
References: http://www.exploit-db.com/exploits/9362; http://www.securityfocus.com/bid/35941; http://www.exploit-db.com/exploits/9362
CVE: CVE-2009-2765
Published: 2009-08-14
Description: httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI.
CVSS Score: 8.3 (HIGH)
CWE: CWE-20
References: http://isc.sans.org/diary.html?storyid=6853; http://metasploit.com/svn/framework3/trunk/modules/exploits/linux/http/ddwrt_cgibin_exec.rb; http://securitytracker.com/id?1022596
CVE: CVE-2009-2766
Published: 2009-08-14
Description: httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remote attackers to change settings via HTTP requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173; http://www.exploit-db.com/exploits/9209; http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173
CVE: CVE-2009-2767
Published: 2009-08-14
Description: The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibly gain privileges via a CLOCK_MONOTONIC_RAW clock_nanosleep call that triggers a NULL pointer dereference.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=70d715fd0597f18528f389b5ac[PII_REDACTED]7744; http://lkml.org/lkml/2009/8/4/28; http://lkml.org/lkml/2009/8/4/40
CVE: CVE-2009-2768
Published: 2009-08-14
Description: The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by executing a shared flat binary, which triggers an access of an "uninitialized cred pointer."
CVSS Score: 7.8 (HIGH)
CWE: CWE-476, CWE-824
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3440625d78711bee41a84cf29c3d8c579b522666; http://lkml.org/lkml/2009/6/22/91; http://secunia.com/advisories/36278
CVE: CVE-2009-2769
Published: 2009-08-14
Description: PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the config[include_dir] parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/36033; http://www.exploit-db.com/exploits/9297; http://secunia.com/advisories/36033
CVE: CVE-2009-2770
Published: 2009-08-14
Description: PowerUpload 2.4 allows remote attackers to bypass authentication and gain administrative access via a MIME encoded value of admin for the myadminname cookie.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.exploit-db.com/exploits/9219; http://www.vupen.com/english/advisories/2009/1962; https://exchange.xforce.ibmcloud.com/vulnerabilities/51860
CVE: CVE-2009-2771
Published: 2009-08-14
Description: Cross-site scripting (XSS) vulnerability in Free Arcade Script 1.3 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to the default URI under search/.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/56580; http://packetstormsecurity.org/0907-exploits/fas-xss.txt; http://secunia.com/advisories/36025
CVE: CVE-2009-2772
Published: 2009-08-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in PG Roommate Finder Solution allow remote attackers to inject arbitrary web script or HTML via the part parameter to (1) quick_search.php and (2) viewprofile.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/56537; http://osvdb.org/56538; http://packetstormsecurity.org/0907-exploits/pgroomate-xss.txt
CVE: CVE-2009-2773
Published: 2009-08-14
Description: PHP remote file inclusion vulnerability in home.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/56573; http://secunia.com/advisories/35972; http://www.exploit-db.com/exploits/9269
CVE: CVE-2009-2774
Published: 2009-08-14
Description: SQL injection vulnerability in paidbanner.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary SQL commands via the ID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35972; http://www.exploit-db.com/exploits/9287; https://exchange.xforce.ibmcloud.com/vulnerabilities/52641
CVE: CVE-2009-2775
Published: 2009-08-14
Description: SQL injection vulnerability in linkout.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9288; http://www.securityfocus.com/bid/35843; http://www.exploit-db.com/exploits/9288
CVE: CVE-2009-2776
Published: 2009-08-14
Description: SQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/56575; http://packetstormsecurity.org/0907-exploits/smartasp-sql.txt; http://secunia.com/advisories/36028
CVE: CVE-2009-2777
Published: 2009-08-14
Description: SQL injection vulnerability in visitor/view.php in GarageSales Script allows remote attackers to execute arbitrary SQL commands via the key parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/36017; http://www.exploit-db.com/exploits/9262; http://www.osvdb.org/56578
CVE: CVE-2009-2778
Published: 2009-08-14
Description: Cross-site scripting (XSS) vulnerability in visitor/view.php in GarageSales Script allows remote attackers to inject arbitrary web script or HTML via the key parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/36017; http://www.exploit-db.com/exploits/9262; http://www.vupen.com/english/advisories/2009/2023
CVE: CVE-2009-2779
Published: 2009-08-17
Description: SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via the id parameter in a productdetail action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/56639; http://packetstormsecurity.org/0907-exploits/ajmatrixdna-sql.txt; http://secunia.com/advisories/36095
CVE: CVE-2009-2780
Published: 2009-08-17
Description: Multiple cross-site scripting (XSS) vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to category.php, view parameter to (2) login.php and (3) viewlisting.php, page parameter to (4) searchresults.php and (5) toplistings.php, and (6) member parameter to viewmember.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0907-exploits/68classifieds-xss.txt; http://secunia.com/advisories/36034; http://www.osvdb.org/56564
CVE: CVE-2009-2781
Published: 2009-08-17
Description: SQL injection vulnerability in forum.php in Arab Portal 2.x, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the qc parameter in an addcomment action, a different vector than CVE-2006-1666.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9320; http://www.securityfocus.com/bid/35914; http://www.exploit-db.com/exploits/9320
CVE: CVE-2009-2782
Published: 2009-08-17
Description: SQL injection vulnerability in the JFusion (com_jfusion) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9324; http://www.securityfocus.com/bid/35912; http://www.exploit-db.com/exploits/9324
CVE: CVE-2009-2783
Published: 2009-08-17
Description: Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the (1) op parameter to modules/pm/viewpmsg.php and (2) query string to modules/profile/user.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5380&w=2; http://osvdb.org/56638; http://secunia.com/advisories/36109
CVE: CVE-2009-2784
Published: 2009-08-17
Description: Multiple directory traversal vulnerabilities in dit.cms 1.3, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the path parameter to index.php in (1) install/, (2) menus/left_rightslideopen/, (3) menus/side_pullout/, (4) menus/side_slideopen/, (5) menus/simple/, (6) menus/top_dropdown/, and (7) menus/topside/; the sitemap parameter to index.php in (8) menus/left_rightslideopen/, (9) menus/side_pullout/, (10) menus/side_slideopen/, (11) menus/top_dropdown/, and (12) menus/topside/; and the (13) relPath parameter to index/index.php. NOTE: PHP remote file inclusion vulnerabilities reportedly also exist for some of these vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/36076; http://www.exploit-db.com/exploits/9310; http://secunia.com/advisories/36076
CVE: CVE-2009-2785
Published: 2009-08-17
Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter to buy.php and the id parameter to (2) contact.php and (3) tellafriend.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/56657; http://osvdb.org/56658; http://osvdb.org/56659
CVE: CVE-2009-2786
Published: 2009-08-17
Description: SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the poster parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/56612; http://secunia.com/advisories/36020; http://www.exploit-db.com/exploits/9289
CVE: CVE-2009-2787
Published: 2009-08-17
Description: Directory traversal vulnerability in include/reputation/rep_profile.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pun_user[language] parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/56613; http://packetstormsecurity.org/0907-exploits/punbbrep-lfi.txt; http://secunia.com/advisories/36020
CVE: CVE-2009-2788
Published: 2009-08-17
Description: Multiple SQL injection vulnerabilities in Mobilelib GOLD 3 allow remote attackers to execute arbitrary SQL commands via the (1) adminName parameter to cp/auth.php, (2) cid parameter to artcat.php, and (3) catid parameter to show.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9327; http://www.securityfocus.com/bid/35910; http://www.exploit-db.com/exploits/9327
CVE: CVE-2009-2789
Published: 2009-08-17
Description: SQL injection vulnerability in the Permis (com_groups) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a list action to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/35849; https://exchange.xforce.ibmcloud.com/vulnerabilities/52142; http://www.securityfocus.com/bid/35849
CVE: CVE-2009-2790
Published: 2009-08-17
Description: SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.  NOTE: this might overlap CVE-2006-3271.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0907-exploits/softbizdating-sql.txt; http://www.securityfocus.com/bid/35896; https://exchange.xforce.ibmcloud.com/vulnerabilities/52158
CVE: CVE-2009-2791
Published: 2009-08-17
Description: PHP remote file inclusion vulnerability in pda_projects.php in WebDynamite ProjectButler 1.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the offset parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/9331; http://www.securityfocus.com/bid/35919; http://www.exploit-db.com/exploits/9331
CVE: CVE-2009-2792
Published: 2009-08-17
Description: Directory traversal vulnerability in plugings/pagecontent.php in Really Simple CMS (RSCMS) 0.3a allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PT parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/9313; https://exchange.xforce.ibmcloud.com/vulnerabilities/52159; http://www.exploit-db.com/exploits/9313
CVE: CVE-2009-2845
Published: 2009-08-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-2768.  Reason: This candidate is a duplicate of CVE-2009-2768.  Notes: All CVE users should reference CVE-2009-2768 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2009-2844
Published: 2009-08-18
Description: cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service (crash) via a sequence of beacon frames in which one frame omits an SSID Information Element (IE) and the subsequent frame contains an SSID IE, which triggers a NULL pointer dereference in the cmp_ies function.  NOTE: a potential weakness in the is_mesh function was also addressed, but the relevant condition did not exist in the code, so it is not a vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=cd3468bad96c00b5a512f551674f[PII_REDACTED]0e; http://jon.oberheide.org/files/cfg80211-remote-dos.c; http://secunia.com/advisories/36278
CVE: CVE-2009-2846
Published: 2009-08-18
Description: The eisa_eeprom_read function in the parisc isa-eeprom component (drivers/parisc/eisa_eeprom.c) in the Linux kernel before 2.6.31-rc6 allows local users to access restricted memory via a negative ppos argument, which bypasses a check that assumes that ppos is positive and causes an out-of-bounds read in the readb function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=6b4dbcd86a9d464057fcc7abe4d[PII_REDACTED]fcc; http://secunia.com/advisories/37105; http://www.mandriva.com/security/advisories?name=MDVSA-2010:198
CVE: CVE-2009-2847
Published: 2009-08-18
Description: The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack function.
CVSS Score: 4.9 (MEDIUM)
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=0083fc2c50e6c5127c2802ad323adf8143ab7856; http://rhn.redhat.com/errata/RHSA-2009-1243.html; http://secunia.com/advisories/36136