deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-1189
Published: 2009-04-27
Description: The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before 1.2.14 uses incorrect logic to validate a basic type, which allows remote attackers to spoof a signature via a crafted key.  NOTE: this is due to an incorrect fix for CVE-2008-3834.
CVSS Score: 3.6 (LOW)
CWE: CWE-20
References: http://bugs.freedesktop.org/show_bug.cgi?id=17803; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705; http://lists.vmware.com/pipermail/security-announce/2010/000082.html
CVE: CVE-2009-1435
Published: 2009-04-27
Description: NTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to cause a denial of service (application crash) via directories with long pathnames.  NOTE: some of these details are obtained from third party information.
CVSS Score: 2.1 (LOW)
CWE: CWE-399
References: http://es.geocities.com/jplopezy/officescan.zip; http://osvdb.org/53890; http://secunia.com/advisories/34737
CVE: CVE-2009-1436
Published: 2009-04-27
Description: The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berkeley DB 1.85 database structures, which allows local users to obtain sensitive information by reading a database file.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10756; http://osvdb.org/53918; http://secunia.com/advisories/34810
CVE: CVE-2009-1437
Published: 2009-04-27
Description: Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file. NOTE: this may overlap CVE-2008-3408.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/53885; http://secunia.com/advisories/34816; https://exchange.xforce.ibmcloud.com/vulnerabilities/49984
CVE: CVE-2009-1438
Published: 2009-04-27
Description: Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted (1) song comment or (2) song name, which triggers a heap-based buffer overflow, as exploited in the wild in August 2008.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://bugs.gentoo.org/show_bug.cgi?id=266913; http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html; http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_med.cpp?r1=1.1&amp%3Br2=1.2
CVE: CVE-2009-1439
Published: 2009-04-27
Description: Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://blog.fefe.de/?ts=b72905a8; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b363b3304bcf68c4541683b2eff70b29f0446a5b; http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html
CVE: CVE-2009-1440
Published: 2009-04-27
Description: Incomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers to conduct argument injection attacks into a command for mplayer via a crafted filename.
CVSS Score: 6.8 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525078; http://secunia.com/advisories/34839; http://www.debian.org/security/2009/dsa-1821
CVE: CVE-2008-6754
Published: 2009-04-27
Description: The Personal Sticky Threads addon 1.0.3c for vBulletin allows remote authenticated users to read the title, author, and pages of an arbitrary thread by toggling a personal sticky.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/51205; http://secunia.com/advisories/33342; http://www.securityfocus.com/archive/1/499562/100/0/threaded
CVE: CVE-2009-1443
Published: 2009-04-27
Description: Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/34763; http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=133&cntnt01returnid=51; http://www.securityfocus.com/bid/34694
CVE: CVE-2009-1444
Published: 2009-04-27
Description: PHP remote file inclusion vulnerability in indexk.php in WebPortal CMS 0.8-beta allows remote attackers to execute arbitrary PHP code via a URL in the lib_path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/54121; http://www.securityfocus.com/bid/34687; https://www.exploit-db.com/exploits/8516
CVE: CVE-2009-1445
Published: 2009-04-27
Description: Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to (1) read arbitrary files via directory traversal sequences in the lang parameter to libraries/helpdocs/help.php and (2) include and execute arbitrary local files via directory traversal sequences in the error parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://osvdb.org/54119; http://osvdb.org/54120; http://www.securityfocus.com/bid/34687
CVE: CVE-2009-1446
Published: 2009-04-27
Description: Unrestricted file upload vulnerability in upload.php in Elkagroup Image Gallery 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in gallery/pictures/. NOTE: some of these details are obtained from third party information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/54115; http://secunia.com/advisories/25844; http://www.securityfocus.com/bid/34679
CVE: CVE-2009-1447
Published: 2009-04-27
Description: Unrestricted file upload vulnerability in admin/editor/image.php in e-cart.biz Free Shopping Cart allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/34736; http://www.securityfocus.com/bid/34590; https://exchange.xforce.ibmcloud.com/vulnerabilities/49956
CVE: CVE-2008-6755
Published: 2009-04-27
Description: ZoneMinder 1.23.3 on Fedora 10 sets the ownership of /etc/zm.conf to the apache user account, and sets the permissions to 0600, which makes it easier for remote attackers to modify this file by accessing it through a (1) PHP or (2) CGI script.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: https://bugzilla.redhat.com/show_bug.cgi?id=476529; https://exchange.xforce.ibmcloud.com/vulnerabilities/50324; https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00204.html
CVE: CVE-2008-6756
Published: 2009-04-27
Description: ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://bugs.gentoo.org/show_bug.cgi?id=250715; https://exchange.xforce.ibmcloud.com/vulnerabilities/50325; http://bugs.gentoo.org/show_bug.cgi?id=250715
CVE: CVE-2009-1190
Published: 2009-04-27
Description: Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit (JDK) before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 through 1.0.2, allows remote attackers to cause a denial of service (CPU consumption) via serializable data with a long regex string containing multiple optional groups, a related issue to CVE-2004-2540.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/34892; http://www.packetstormsecurity.org/hitb06/DAY_1_-_Marc_Schoenefeld_-_Pentesting_Java_J2EE.pdf; http://www.securityfocus.com/archive/1/502926/100/0/threaded
CVE: CVE-2009-1448
Published: 2009-04-27
Description: Cross-site scripting (XSS) vulnerability in apricot.php in LovPop.net APRICOT, probably 1.20, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN82744714/index.html; http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000019.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/49948
CVE: CVE-2009-1449
Published: 2009-04-27
Description: Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.1 allows remote attackers to execute arbitrary code via a skin file (skin.ini) with a large PlaylistSkin parameter.  NOTE: this may overlap CVE-2008-5735.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/54113; http://secunia.com/advisories/34816; https://exchange.xforce.ibmcloud.com/vulnerabilities/50448
CVE: CVE-2009-1450
Published: 2009-04-28
Description: PHP remote file inclusion vulnerability in format.php in SMA-DB 0.3.12 allows remote attackers to execute arbitrary PHP code via a URL in the _page_content parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://www.exploit-db.com/exploits/7936; https://www.exploit-db.com/exploits/7936
CVE: CVE-2009-1451
Published: 2009-04-28
Description: Cross-site scripting (XSS) vulnerability in startpage.php in SMA-DB 0.3.12 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/7936; https://www.exploit-db.com/exploits/7936
CVE: CVE-2008-2438
Published: 2009-04-28
Description: Integer overflow in ovalarmsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a crafted command to TCP port 2954, which triggers a heap-based buffer overflow.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://osvdb.org/54107; http://secunia.com/secunia_research/2008-38/; http://www.securityfocus.com/archive/1/503024
CVE: CVE-2008-6757
Published: 2009-04-28
Description: Cross-site scripting (XSS) vulnerability in manuals_search.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to inject arbitrary web script or HTML via the manuals_search parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/33340; http://www.osvdb.org/53284; http://www.securityfocus.com/archive/1/499625/100/0/threaded
CVE: CVE-2008-6758
Published: 2009-04-28
Description: Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to hijack the authentication of arbitrary users for requests that conduct persistent cross-site scripting (XSS) attacks via the cart_name parameter in a save action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/51029; http://osvdb.org/53283; http://secunia.com/advisories/33340
CVE: CVE-2008-6759
Published: 2009-04-28
Description: ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via a URL in the POST_DATA parameter to manuals_search.php, which reveals the installation path in an error message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-59
References: http://www.osvdb.org/53281; http://www.securityfocus.com/archive/1/499625/100/0/threaded; http://www.securityfocus.com/bid/33043
CVE: CVE-2008-6760
Published: 2009-04-28
Description: ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via an unauthenticated add and save action for a shopping cart in cart_save.php, which reveals the SQL table names in an error message, related to code that mishandles the lack of a user_id parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-59
References: http://www.osvdb.org/53282; http://www.securityfocus.com/archive/1/499625/100/0/threaded; http://www.securityfocus.com/bid/33043
CVE: CVE-2008-6761
Published: 2009-04-28
Description: Static code injection vulnerability in admin/install.php in Flexcustomer 0.0.6 might allow remote attackers to inject arbitrary PHP code into const.inc.php via the installdbname parameter (aka the Database Name field).  NOTE: the installation instructions specify deleting admin/install.php.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/47652; https://www.exploit-db.com/exploits/7622; https://exchange.xforce.ibmcloud.com/vulnerabilities/47652
CVE: CVE-2008-6762
Published: 2009-04-28
Description: Open redirect vulnerability in wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backto parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-59
References: http://archives.neohapsis.com/archives/bugtraq/2008-12/0226.html; http://osvdb.org/52213; http://www.debian.org/security/2009/dsa-1871
CVE: CVE-2008-6763
Published: 2009-04-28
Description: login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrary account by setting the logged_in cookie to that account's username.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/31801; http://www.osvdb.org/47941; http://www.securityfocus.com/bid/33031
CVE: CVE-2008-6764
Published: 2009-04-28
Description: Cross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://maximilianosoler.com.ar/vulns/XSS-Silentum_LoginSys.txt; http://secunia.com/advisories/31801; http://www.osvdb.org/47940
CVE: CVE-2008-6765
Published: 2009-04-28
Description: ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to access the contents of an arbitrary shopping cart via a modified cart_name parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/499625/100/0/threaded; http://www.securityfocus.com/bid/33043; http://www.securitytracker.com/id?1021497
CVE: CVE-2008-6766
Published: 2009-04-28
Description: cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to cause a denial of service (excessive shopping carts) via a flood of requests.
CVSS Score: 5.0 (MEDIUM)
References: http://www.osvdb.org/53285; http://www.securityfocus.com/archive/1/499625/100/0/threaded; http://www.securitytracker.com/id?1021497
CVE: CVE-2008-6767
Published: 2009-04-28
Description: wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the application, and possibly cause a denial of service (application outage), via a direct request.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2008-12/0226.html; http://www.debian.org/security/2009/dsa-1871; https://exchange.xforce.ibmcloud.com/vulnerabilities/50384
CVE: CVE-2009-1452
Published: 2009-04-28
Description: Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execute arbitrary PHP code via a URL in the (1) _page_css and (2) _page_javascript parameters. NOTE: the _page_content vector is already is covered by CVE-2009-1450.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/34569; https://exchange.xforce.ibmcloud.com/vulnerabilities/49928; https://www.exploit-db.com/exploits/8460
CVE: CVE-2009-1453
Published: 2009-04-28
Description: SQL injection vulnerability in class.eport.php in Tiny Blogr 1.0.0 rc4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the txtUsername parameter (aka the Username field).  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/34768; http://www.securityfocus.com/archive/1/502747/100/0/threaded; http://www.securityfocus.com/bid/34581
CVE: CVE-2009-1454
Published: 2009-04-28
Description: Cross-site scripting (XSS) vulnerability in tasks.php in WebCollab before 2.50 (aka Billy Goat) allows remote attackers to inject arbitrary web script or HTML via the selection parameter in a todo action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://holisticinfosec.org/content/view/108/45/; http://secunia.com/advisories/34568; http://sourceforge.net/project/shownotes.php?release_id=676245&group_id=75945
CVE: CVE-2009-1455
Published: 2009-04-28
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in WebCollab before 2.50 (aka Billy Goat) allow remote attackers to hijack the authentication of administrators for requests that change an arbitrary password or have other unspecified impact.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://holisticinfosec.org/content/view/108/45/; http://secunia.com/advisories/34568; http://sourceforge.net/project/shownotes.php?release_id=676245&group_id=75945
CVE: CVE-2009-1456
Published: 2009-04-28
Description: Directory traversal vulnerability in admin.php in Malleo 1.2.3 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the module parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/34766; http://www.securityfocus.com/archive/1/502763/100/0/threaded; http://www.securityfocus.com/bid/34588
CVE: CVE-2009-1457
Published: 2009-04-28
Description: Cross-site scripting (XSS) vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/53779; http://secunia.com/advisories/34783; http://www.securityfocus.com/bid/34594
CVE: CVE-2009-1458
Published: 2009-04-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to inject arbitrary web script or HTML via (1) the slab parameter in an edit action, (2) the catname parameter in a showcats action, and (3) the cat parameter in a reordercat action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6680&w=2; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8561&w=2; http://osvdb.org/53776
CVE: CVE-2009-1459
Published: 2009-04-28
Description: Cross-site request forgery (CSRF) vulnerability in razorCMS before 0.4 allows remote attackers to hijack the authentication of administrators for requests that create a web page containing PHP code.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6680&w=2; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8561&w=2; http://osvdb.org/53778
CVE: CVE-2009-1460
Published: 2009-04-28
Description: razorCMS before 0.4 uses weak permissions for (1) admin/core/admin_config.php, which allows local users to obtain the administrator's password hash and FTP user credentials; and (2) the root directory, (3) datastore/, and (4) admin/core/, which allows local users to have an unspecified impact.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6680&w=2; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8561&w=2; http://osvdb.org/53777
CVE: CVE-2009-1461
Published: 2009-04-28
Description: Cross-site scripting (XSS) vulnerability in the Create New Page form in razorCMS 0.3 RC2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Page Title field.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8561&w=2; http://razorcms.co.uk/support/viewtopic.php?f=13&t=325; http://www.securityfocus.com/bid/34854
CVE: CVE-2009-1462
Published: 2009-04-28
Description: The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6680&w=2; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8561&w=2; http://razorcms.co.uk/support/viewtopic.php?f=13&t=325
CVE: CVE-2009-1463
Published: 2009-04-28
Description: Static code injection vulnerability in razorCMS before 0.4 allows remote attackers to inject arbitrary PHP code into any page by saving content as a .php file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6680&w=2; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8561&w=2; http://razorcms.co.uk/support/viewtopic.php?f=13&t=325
CVE: CVE-2009-0719
Published: 2009-04-29
Description: Unspecified vulnerability in useradd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via unknown vectors, a different issue than CVE-2008-1660.
CVSS Score: 6.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/503038; http://www.securityfocus.com/bid/34748; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5791
CVE: CVE-2009-1428
Published: 2009-04-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus (SAV) before 10.1 MR8, Symantec Endpoint Protection (SEP) 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, related to "two parsing errors."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/54132; http://secunia.com/advisories/34936; http://www.securityfocus.com/bid/34669
CVE: CVE-2009-1429
Published: 2009-04-29
Description: The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary commands via a crafted packet whose contents are interpreted as a command to be launched in a new process by the CreateProcessA function.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://osvdb.org/54157; http://secunia.com/advisories/34856; http://securityreason.com/securityalert/8346
CVE: CVE-2009-1430
Published: 2009-04-29
Description: Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allow remote attackers to execute arbitrary code via (1) a crafted packet or (2) data that ostensibly arrives from the MsgSys.exe process.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/34856; http://www.securityfocus.com/archive/1/503080/100/0/threaded; http://www.securityfocus.com/bid/34672