deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-3254
Published: 2009-09-18
Description: Multiple stack-based buffer overflows in Ultimate Player 1.56 beta allow remote attackers to execute arbitrary code via a long string in a (1) .m3u or (2) .upl playlist file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/9548; http://www.vupen.com/english/advisories/2009/2491; http://www.exploit-db.com/exploits/9548
CVE: CVE-2009-3255
Published: 2009-09-18
Description: SQL injection vulnerability in RASH Quote Management System (RQMS) 1.2.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an admin action to the default URI.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/57468; http://packetstormsecurity.org/0908-exploits/rqms-bypass.txt; http://secunia.com/advisories/36477
CVE: CVE-2009-3256
Published: 2009-09-18
Description: Cross-site scripting (XSS) vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the URI, as demonstrated by a SCRIPT element in an arbitrary parameter such as the asd parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt; http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt
CVE: CVE-2009-3257
Published: 2009-09-18
Description: vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the (1) Account Billing Address and (2) Shipping Address fields in a profile by creating a Sales Order (SO) associated with that profile.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://secunia.com/advisories/36309; http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5055; http://secunia.com/advisories/36309
CVE: CVE-2009-3258
Published: 2009-09-18
Description: vtiger CRM before 5.1.0 allows remote authenticated users, with certain View privileges, to delete (1) attachments, (2) reports, (3) filters, (4) views, and (5) tickets; insert (6) attachments, (7) reports, (8) filters, (9) views, and (10) tickets; and edit (11) reports, (12) filters, (13) views, and (14) tickets via unspecified vectors.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://forums.vtiger.com/viewtopic.php?t=15094; http://forums.vtiger.com/viewtopic.php?t=16756; http://secunia.com/advisories/36309
CVE: CVE-2009-3259
Published: 2009-09-18
Description: Multiple SQL injection vulnerabilities in RASH Quote Management System (RQMS) 1.2.2 allow remote attackers to execute arbitrary SQL commands via (1) the search parameter in a search action, (2) the quote parameter in a quote addition, or (3) a User_Name cookie in unspecified administrative actions.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/57467; http://osvdb.org/57469; http://osvdb.org/57470
CVE: CVE-2009-3260
Published: 2009-09-18
Description: Cross-site scripting (XSS) vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the header of the topic in a comment.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt; http://www.vupen.com/english/advisories/2009/2471; http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt
CVE: CVE-2009-3261
Published: 2009-09-18
Description: update/update_0.1.2_to_0.2.php in LiveStreet 0.2 does not require administrative authentication, which allows remote attackers to perform DROP TABLE operations via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt; http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt
CVE: CVE-2009-3262
Published: 2009-09-18
Description: Cross-site scripting (XSS) vulnerability in the Self Service UI (SSUI) in IBM Tivoli Identity Manager (ITIM) 5.0.0.5 allows remote authenticated users to inject arbitrary web script or HTML via the last name field in a profile.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/36511; http://securitytracker.com/id?1022837; http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54747
CVE: CVE-2008-7244
Published: 2009-09-18
Description: Mozilla Firefox 3.0.1 and earlier allows remote attackers to cause a denial of service (browser hang) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://websecurity.com.ua/2456/; http://www.securityfocus.com/archive/1/506328/100/100/threaded; http://websecurity.com.ua/2456/
CVE: CVE-2008-7245
Published: 2009-09-18
Description: Opera 9.52 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://websecurity.com.ua/2456/; http://www.securityfocus.com/archive/1/506328/100/100/threaded; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6350
CVE: CVE-2008-7246
Published: 2009-09-18
Description: Google Chrome 0.2.149.29 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://websecurity.com.ua/2456/; http://www.securityfocus.com/archive/1/506328/100/100/threaded; http://websecurity.com.ua/2456/
CVE: CVE-2009-2741
Published: 2009-09-18
Description: Unspecified vulnerability in the wberuntimeear application in the test servlet in IBM WebSphere Business Events 6.1 and 6.2 allows remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IZ56367; https://exchange.xforce.ibmcloud.com/vulnerabilities/53189; http://www-01.ibm.com/support/docview.wss?uid=swg1IZ56367
CVE: CVE-2009-2793
Published: 2009-09-18
Description: The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the iret instruction, which might allow local users to gain privileges via vectors related to a tempEIP pseudocode variable that is outside of the code-segment limits.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/archive/1/506531/100/0/threaded; http://www.securityfocus.com/archive/1/506531/100/0/threaded
CVE: CVE-2009-3263
Published: 2009-09-18
Description: Cross-site scripting (XSS) vulnerability in Google Chrome 2.x and 3.x before 3.0.195.21 allows remote attackers to inject arbitrary web script or HTML via a (1) RSS or (2) Atom feed, related to the rendering of the application/rss+xml content type as XML "active content."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://code.google.com/p/chromium/issues/detail?id=21238; http://googlechromereleases.blogspot.com/2009/09/stable-channel-update.html; http://secunia.com/advisories/36770
CVE: CVE-2009-3264
Published: 2009-09-18
Description: The getSVGDocument method in Google Chrome before 3.0.195.21 omits an unspecified "access check," which allows remote web servers to bypass the Same Origin Policy and conduct cross-site scripting attacks via unknown vectors, related to a user's visit to a different web server that hosts an SVG document.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://code.google.com/p/chromium/issues/detail?id=21338; http://googlechromereleases.blogspot.com/2009/09/stable-channel-update.html; http://osvdb.org/58193
CVE: CVE-2009-3265
Published: 2009-09-18
Description: Cross-site scripting (XSS) vulnerability in Opera 9 and 10 allows remote attackers to inject arbitrary web script or HTML via a (1) RSS or (2) Atom feed, related to the rendering of the application/rss+xml content type as "scripted content." NOTE: the vendor reportedly considers this behavior a "design feature," not a vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/; http://www.securityfocus.com/archive/1/506517/100/0/threaded; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6370
CVE: CVE-2009-3266
Published: 2009-09-18
Description: Opera before 10.01 does not properly restrict HTML in a (1) RSS or (2) Atom feed, which allows remote attackers to conduct cross-site scripting (XSS) attacks, and conduct cross-zone scripting attacks involving the Feed Subscription Page to read feeds or create feed subscriptions, via a crafted feed, related to the rendering of the application/rss+xml content type as "scripted content."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2009-10/0289.html; http://secunia.com/advisories/37182; http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/
CVE: CVE-2009-3267
Published: 2009-09-18
Description: Microsoft Internet Explorer 6 through 6.0.2900.2180, and 7.0.6000.16711, allows remote attackers to cause a denial of service (CPU consumption) via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-400
References: http://websecurity.com.ua/3194/; http://www.securityfocus.com/archive/1/506328/100/100/threaded; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5519
CVE: CVE-2009-3268
Published: 2009-09-18
Description: Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://websecurity.com.ua/3194/; http://www.securityfocus.com/archive/1/506328/100/100/threaded; http://websecurity.com.ua/3194/
CVE: CVE-2009-3269
Published: 2009-09-18
Description: Opera 9.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a series of automatic submissions of a form containing a KEYGEN element, a related issue to CVE-2009-1828.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://websecurity.com.ua/3194/; http://www.securityfocus.com/archive/1/506328/100/100/threaded; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6358
CVE: CVE-2009-3270
Published: 2009-09-18
Description: Microsoft Internet Explorer 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-400
References: http://websecurity.com.ua/2872/; http://www.securityfocus.com/archive/1/506328/100/100/threaded; http://www.securityfocus.com/bid/79354
CVE: CVE-2009-2140
Published: 2009-09-21
Description: Multiple heap-based buffer overflows in cppcanvas/source/mtfrenderer/emfplus.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allow remote attackers to execute arbitrary code via a crafted EMF+ file, a similar issue to CVE-2008-2238.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://cgit.freedesktop.org/ooo-build/ooo-build/commit/?id=49b4e38571912a7d28c4044e5b2bd57e51c77d55; http://marc.info/?l=oss-security&m=[PII_REDACTED]0739&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]5765&w=2
CVE: CVE-2009-2742
Published: 2009-09-21
Description: Cross-site scripting (XSS) vulnerability in Eclipse Help in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27 allows remote attackers to inject arbitrary web script or HTML via unspecified input.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg27007951; http://www-1.ibm.com/support/docview.wss?uid=swg1PK78917; http://www.vupen.com/english/advisories/2009/2721
CVE: CVE-2009-2743
Published: 2009-09-21
Description: IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27, and 7.0 before 7.0.0.7, does not properly handle an exception occurring after use of wsadmin scripts and configuration of JAAS-J2C Authentication Data, which allows local users to obtain sensitive information by reading the First Failure Data Capture (FFDC) log file.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/37796; http://www-01.ibm.com/support/docview.wss?uid=swg27007951; http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE: CVE-2009-2744
Published: 2009-09-21
Description: Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27 allows remote attackers to cause a denial of service via unknown vectors, related to "an error in fixpacks 6.1.0.23 and 6.1.0.25."
CVSS Score: 7.8 (HIGH)
References: http://www-01.ibm.com/support/docview.wss?uid=swg27007951; http://www-1.ibm.com/support/docview.wss?uid=swg1PK91709; http://www.vupen.com/english/advisories/2009/2721
CVE: CVE-2009-2939
Published: 2009-09-21
Description: The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the postfix user write access to /var/spool/postfix/pid, which might allow local users to conduct symlink attacks that overwrite arbitrary files.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://www.debian.org/security/2011/dsa-2233; http://www.openwall.com/lists/oss-security/2009/09/18/6; http://www.debian.org/security/2011/dsa-2233
CVE: CVE-2009-3200
Published: 2009-09-21
Description: The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passphrase requirement and decrypt the hard drive by reading this variable, deobfuscating the key, and running a cryptsetup luksOpen command.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-310
References: http://forum.qnap.com/viewtopic.php?f=11&t=11214&start=20#p63346; http://forum.qnap.com/viewtopic.php?f=12&t=12104&start=10#p63341; http://secunia.com/advisories/36793
CVE: CVE-2009-3271
Published: 2009-09-21
Description: Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service (application crash) via a long tel: URL in the SRC attribute of an IFRAME element.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.exploit-db.com/exploits/9666; http://www.securityfocus.com/bid/36386; https://exchange.xforce.ibmcloud.com/vulnerabilities/53251
CVE: CVE-2009-3272
Published: 2009-09-21
Description: Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions before 4.1.2, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls eval on a long string composed of A/ sequences.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://secunia.com/advisories/43068; http://www.exploit-db.com/exploits/9606
CVE: CVE-2009-3273
Published: 2009-09-21
Description: iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-mail servers via a crafted certificate.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://www.securityfocus.com/archive/1/506428/100/0/threaded; http://www.securityfocus.com/bid/36370; https://exchange.xforce.ibmcloud.com/vulnerabilities/53234
CVE: CVE-2009-3274
Published: 2009-09-21
Description: Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information.
CVSS Score: 4.4 (MEDIUM)
References: http://jbrownsec.blogspot.com/2009/09/vamos-updates.html; http://secunia.com/advisories/36649; http://securitytube.net/Zero-Day-Demos-%28Firefox-Vulnerability-Discovered%29-video.aspx
CVE: CVE-2009-3275
Published: 2009-09-21
Description: Blocks/Common/Src/Configuration/Manageability/Adm/AdmContentBuilder.cs in Microsoft patterns & practices Enterprise Library (aka EntLib) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many \ (backslash) characters followed by a " (double quote), related to a certain regular expression, aka a "ReDoS" vulnerability.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-134
References: http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf; http://www.securityfocus.com/archive/1/506419/100/0/threaded; http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf
CVE: CVE-2009-3276
Published: 2009-09-21
Description: Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed in NASD CORE.NET Terelik (aka corenet1) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many alphabetic characters followed by a ! (exclamation point), related to a certain regular expression, aka a "ReDoS" vulnerability.
CVSS Score: 5.0 (MEDIUM)
References: http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf; http://www.securityfocus.com/archive/1/506419/100/0/threaded; http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf
CVE: CVE-2009-3277
Published: 2009-09-21
Description: DataVault.Tesla/Impl/TypeSystem/AssociationHelper.cs in datavault allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of an [ (open bracket) followed by many commas, related to a certain regular expression, aka a "ReDoS" vulnerability.
CVSS Score: 5.0 (MEDIUM)
References: http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf; http://www.securityfocus.com/archive/1/506419/100/0/threaded; http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf
CVE: CVE-2009-3278
Published: 2009-09-21
Description: The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 use the rand library function to generate a certain recovery key, which makes it easier for local users to determine this key via a brute-force attack.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-338
References: http://secunia.com/advisories/36793; http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt; http://www.securityfocus.com/archive/1/506607/100/0/threaded
CVE: CVE-2009-3279
Published: 2009-09-21
Description: The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create a LUKS partition by using the AES-256 cipher in plain CBC mode, which allows local users to obtain sensitive information via a watermark attack.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-310
References: http://secunia.com/advisories/36793; http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt; http://www.securityfocus.com/archive/1/506607/100/0/threaded
CVE: CVE-2009-3280
Published: 2009-09-21
Description: Integer signedness error in the find_ie function in net/wireless/scan.c in the cfg80211 subsystem in the Linux kernel before 2.6.31.1-rc1 allows remote attackers to cause a denial of service (soft lockup) via malformed packets.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fcc6cb0c13555e78c2d47257b6d1b5e59b0c419a; http://patchwork.kernel.org/patch/45106/; http://www.kernel.org/pub/linux/kernel/v2.6/stable-review/patch-2.6.31.1-rc1.bz2
CVE: CVE-2009-3283
Published: 2009-09-22
Description: Cross-site scripting (XSS) vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, and webshot, dated before 20090914, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to cookies.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN53591199/index.html; http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000063.html; http://phpspot.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html
CVE: CVE-2009-3284
Published: 2009-09-22
Description: Directory traversal vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, and webshot, dated before 20090914, allows remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://jvn.jp/en/jp/JVN65914253/index.html; http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000064.html; http://phpspot.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html
CVE: CVE-2009-3286
Published: 2009-09-22
Description: NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an O_EXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the do_open_permission function even when a create fails.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=81ac95c5; http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html; http://lists.vmware.com/pipermail/security-announce/2010/000082.html
CVE: CVE-2009-3287
Published: 2009-09-22
Description: lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://github.com/macournoyer/thin/blob/master/CHANGELOG; http://github.com/macournoyer/thin/commit/7bd027914c5ffd36bb408ef47dc749de3b6e063a; http://www.openwall.com/lists/oss-security/2009/09/12/1
CVE: CVE-2009-3288
Published: 2009-09-22
Description: The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of service (kernel OOPS and NULL pointer dereference), as demonstrated by using xcdroast to duplicate a CD.  NOTE: this is only exploitable by users who can open the cdrom device.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-119
References: http://lkml.org/lkml/2009/9/3/1; http://lkml.org/lkml/2009/9/3/107; http://secunia.com/advisories/37105
CVE: CVE-2009-3289
Published: 2009-09-22
Description: The g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link (777), which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html; http://secunia.com/advisories/39656; http://www.openwall.com/lists/oss-security/2009/09/08/8
CVE: CVE-2009-3290
Published: 2009-09-22
Description: The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service (guest kernel crash) and read or write guest kernel memory via unspecified "random addresses."
CVSS Score: 7.2 (HIGH)
CWE: CWE-399
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=07708c4af1346ab1521b26a202f438366b7bcffd; http://patchwork.kernel.org/patch/38926/; http://secunia.com/advisories/37105