deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-1527
Published: 2009-05-05
Description: Race condition in the ptrace_attach function in kernel/ptrace.c in the Linux kernel before 2.6.30-rc4 allows local users to gain privileges via a PTRACE_ATTACH ptrace call during an exec system call that is launching a setuid application, related to locking an incorrect cred_exec_mutex object.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-362
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cad81bc2529ab8c62b6fdc83a1c0c7f4a87209eb; http://secunia.com/advisories/34977; http://secunia.com/advisories/35120
CVE: CVE-2009-1548
Published: 2009-05-06
Description: SQL injection vulnerability in index.php in BluSky CMS allows remote attackers to execute arbitrary SQL commands via the news_id parameter in a read action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/54221; http://secunia.com/advisories/34998; http://www.securityfocus.com/bid/34811
CVE: CVE-2009-1549
Published: 2009-05-06
Description: AGTC MyShop 3.2b allows remote attackers to bypass authentication and obtain administrative access setting the log_accept cookie to "correcto."
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://osvdb.org/54216; http://secunia.com/advisories/34968; http://www.securityfocus.com/bid/34808
CVE: CVE-2009-1550
Published: 2009-05-06
Description: Zakkis Technology ABC Advertise 1.0 does not properly restrict access to admin.inc.php, which allows remote attackers to obtain the administrator login name and password via a direct request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/50183; https://www.exploit-db.com/exploits/8555; https://exchange.xforce.ibmcloud.com/vulnerabilities/50183
CVE: CVE-2009-1551
Published: 2009-05-06
Description: Multiple PHP remote file inclusion vulnerabilities in Qt quickteam 2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) qte_web_path parameter to qte_web.php and the (2) qte_root parameter to bin/qte_init.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/54217; http://osvdb.org/54218; http://secunia.com/advisories/34997
CVE: CVE-2009-1552
Published: 2009-05-06
Description: Unspecified vulnerability in the IGMP driver in SCO Unixware Release 7.1.4 Maintenance Pack 4 allows attackers to cause a denial of service (system panic) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
References: ftp://ftp.sco.com/pub/unixware7/714/security/p535283/p535283.txt; http://osvdb.org/54168; http://secunia.com/advisories/34951
CVE: CVE-2009-1553
Published: 2009-05-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) applications/applications.jsf, (2) configuration/configuration.jsf, (3) customMBeans/customMBeans.jsf, (4) resourceNode/resources.jsf, (5) sysnet/registration.jsf, or (6) webService/webServicesGeneral.jsf; or the name parameter to (7) configuration/auditModuleEdit.jsf, (8) configuration/httpListenerEdit.jsf, or (9) resourceNode/jdbcResourceEdit.jsf.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://dsecrg.com/pages/vul/show.php?id=134; http://jvn.jp/en/jp/JVN73653977/index.html; http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000027.html
CVE: CVE-2009-1554
Published: 2009-05-06
Description: Cross-site scripting (XSS) vulnerability in ThemeServlet.java in Sun Woodstock 4.2, as used in Sun GlassFish Enterprise Server and other products, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 string in the PATH_INFO, which is displayed on the 404 error page, as demonstrated by the PATH_INFO to theme/META-INF.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://dsecrg.com/pages/vul/show.php?id=138; http://osvdb.org/54220; http://secunia.com/advisories/35006
CVE: CVE-2009-1555
Published: 2009-05-06
Description: The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 sends configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by reading the SetupWizard.exe process memory, a related issue to CVE-2008-4390.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/34767; http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-1/; http://www.securityfocus.com/bid/34596
CVE: CVE-2009-1556
Published: 2009-05-06
Description: img/main.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote authenticated users to read arbitrary files in img/ via a filename in the next_file parameter, as demonstrated by reading .htpasswd to obtain the admin password, a different vulnerability than CVE-2004-2507.
CVSS Score: 3.5 (LOW)
CWE: CWE-200
References: http://secunia.com/advisories/34767; http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-2/; http://www.securityfocus.com/bid/34629
CVE: CVE-2009-1557
Published: 2009-05-06
Description: Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allow remote attackers to inject arbitrary web script or HTML via the next_file parameter to (1) main.cgi, (2) img/main.cgi, or (3) adm/file.cgi; or (4) the this_file parameter to adm/file.cgi.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/34767; http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/; http://www.securityfocus.com/bid/34714
CVE: CVE-2009-1558
Published: 2009-05-06
Description: Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote attackers to read arbitrary files via a %2e. (encoded dot dot) or an absolute pathname in the next_file parameter.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/; http://www.securityfocus.com/bid/34713; http://www.vupen.com/english/advisories/2009/1173
CVE: CVE-2009-1559
Published: 2009-05-06
Description: Absolute path traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R24 and possibly 1.00R22 allows remote attackers to read arbitrary files via an absolute pathname in the this_file parameter.  NOTE: traversal via a .. (dot dot) is probably also possible.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/; http://www.securityfocus.com/bid/34713; http://www.vupen.com/english/advisories/2009/1173
CVE: CVE-2009-1560
Published: 2009-05-06
Description: The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 stores passwords and wireless-network keys in cleartext in (1) pass_wd.htm and (2) Wsecurity.htm, which allows remote attackers to obtain sensitive information by reading the HTML source code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-310
References: http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/; http://www.vupen.com/english/advisories/2009/1173; https://exchange.xforce.ibmcloud.com/vulnerabilities/50410
CVE: CVE-2009-1561
Published: 2009-05-06
Description: Cross-site request forgery (CSRF) vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware 1.05.7 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that change the administrator password via the sysPasswd and sysConfirmPasswd parameters.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://archives.neohapsis.com/archives/bugtraq/2009-04/0198.html; http://packetstormsecurity.org/0904-exploits/linksysadmin-passwd.txt; http://secunia.com/advisories/34805
CVE: CVE-2009-1572
Published: 2009-05-06
Description: The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526311; http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html; http://marc.info/?l=quagga-dev&m=[PII_REDACTED]6078&w=2
CVE: CVE-2009-1573
Published: 2009-05-06
Description: xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain privileges by listing the process and its arguments.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526678; http://secunia.com/advisories/39834; http://www.openwall.com/lists/oss-security/2009/05/05/2
CVE: CVE-2009-1574
Published: 2009-05-06
Description: racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705; http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html
CVE: CVE-2009-1575
Published: 2009-05-06
Description: Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows remote attackers to inject arbitrary web script or HTML via crafted UTF-8 byte sequences before the Content-Type meta tag, which are treated as UTF-7 by Internet Explorer 6 and 7.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/449078; http://secunia.com/advisories/34948; http://secunia.com/advisories/34950
CVE: CVE-2009-1576
Published: 2009-05-06
Description: Unspecified vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows user-assisted remote attackers to obtain sensitive information by tricking victims into visiting the front page of the site with a crafted URL and causing form data to be sent to an attacker-controlled site, possibly related to multiple / (slash) characters that are not properly handled by includes/bootstrap.inc, as demonstrated using the search box.  NOTE: this vulnerability can be leveraged to conduct cross-site request forgery (CSRF) attacks.
CVSS Score: 4.3 (MEDIUM)
References: http://drupal.org/files/sa-core-2009-005/SA-CORE-2009-005-5.16.patch; http://drupal.org/node/449078; http://secunia.com/advisories/34948
CVE: CVE-2008-6792
Published: 2009-05-07
Description: system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully conduct brute-force password attacks.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://osvdb.org/50037; http://secunia.com/advisories/32566; http://www.ubuntu.com/usn/usn-663-1
CVE: CVE-2008-6793
Published: 2009-05-07
Description: The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters after an arg1= sequence in a filename within a forensic image.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/49574; http://secunia.com/advisories/32553; http://www.ikkisoft.com/stuff/LC-2008-07.txt
CVE: CVE-2008-6794
Published: 2009-05-07
Description: SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/49483; http://secunia.com/advisories/32524; http://www.securityfocus.com/bid/35046
CVE: CVE-2008-6795
Published: 2009-05-07
Description: SQL injection vulnerability in view_news.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL commands via the nID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/32109; https://exchange.xforce.ibmcloud.com/vulnerabilities/46348; https://www.exploit-db.com/exploits/6981
CVE: CVE-2008-6796
Published: 2009-05-07
Description: SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter (aka the Admin field or Username field).
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/32134; http://www.vupen.com/english/advisories/2008/3026; https://exchange.xforce.ibmcloud.com/vulnerabilities/46394
CVE: CVE-2009-1441
Published: 2009-05-07
Description: Heap-based buffer overflow in the ParamTraits<SkBitmap>::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://code.google.com/p/chromium/issues/detail?id=10869; http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html; http://osvdb.org/54288
CVE: CVE-2009-1442
Published: 2009-05-07
Description: Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted (1) image or (2) canvas.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://code.google.com/p/chromium/issues/detail?id=10736; http://code.google.com/p/skia/source/detail?r=159; http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html
CVE: CVE-2009-1577
Published: 2009-05-07
Description: Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted remote attackers to execute arbitrary code via a long (1) function name or (2) symbol in a source-code file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://cscope.cvs.sourceforge.net/viewvc/cscope/cscope/src/find.c?r1=1.18&r2=1.19; http://cscope.cvs.sourceforge.net/viewvc/cscope/cscope/src/find.c?view=log#rev1.19; http://cvs.fedoraproject.org/viewvc/rpms/cscope/devel/cscope-15.5-putstring-overflow.patch
CVE: CVE-2008-6797
Published: 2009-05-07
Description: The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 7.8 (HIGH)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/576996; http://www.mitel.com/resources/NuPoint_and_Exchange.pdf; http://www.securityfocus.com/bid/34847
CVE: CVE-2008-6798
Published: 2009-05-07
Description: Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via (1) the us parameter (aka the Username field) or (2) the ps parameter (aka the Password field).
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/32134; http://www.vupen.com/english/advisories/2008/3121; https://www.exploit-db.com/exploits/7094
CVE: CVE-2008-6799
Published: 2009-05-07
Description: connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative privileges by setting the s parameter to "7."
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0237&w=2; http://packetstorm.linuxsecurity.com/0810-exploits/flashchat-bypass.txt; http://secunia.com/advisories/32350
CVE: CVE-2008-6800
Published: 2009-05-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is not a security issue.  It was originally created based on one vendor's misinterpretation of an upstream changelog comment that referred to a race condition in the winbind daemon (aka winbindd) in Samba before 3.0.32.  The upstream vendor states: "The Samba Team sees no way to exploit this race condition by a user of the system or an external attacker. In order to be able to trigger the race condition a privileged user (root) need to intentionally kill a winbind child process and carefully time the killing to trigger the race condition. Although, if the user is already privileged, it can more easily just kill the parent process directly."  CVE concurs with the dispute.  Notes: CVE users should not use this identifier
CVE: CVE-2008-6801
Published: 2009-05-07
Description: Cross-site request forgery (CSRF) vulnerability in Vivvo CMS before 4.0.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/32324; http://www.osvdb.org/49172; http://www.vivvo.net/changelog.php
CVE: CVE-2008-6802
Published: 2009-05-07
Description: Multiple SQL injection vulnerabilities in index.php in phPhotoGallery 0.92 allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/31850; http://www.securityfocus.com/bid/31850/exploit; http://www.securityfocus.com/bid/31850
CVE: CVE-2009-1582
Published: 2009-05-07
Description: Million Dollar Text Links 1.0 does not properly restrict administrator access to admin.home.php, which allows remote attackers to bypass intended restrictions and gain privileges via a direct request to admin.home.php after visiting admin.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://osvdb.org/54204; http://secunia.com/advisories/34994; http://www.securityfocus.com/bid/34809
CVE: CVE-2009-1583
Published: 2009-05-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in TemaTres 1.0.3 and 1.031 allow remote attackers to inject arbitrary web script or HTML via the (1) search form; (2) _expresion_de_busqueda, (3) letra, (4) estado_id, and (5) tema parameters to index.php; the (6) PATH_INFO to index.php; (7) unspecified parameters when editing a term as specified by the edit_id and tema parameters to index.php; and the (7) y, (8) ord, and (9) m parameters to sobre.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/54247; http://secunia.com/advisories/34983; http://secunia.com/advisories/34990
CVE: CVE-2009-1584
Published: 2009-05-07
Description: Multiple SQL injection vulnerabilities in TemaTres 1.0.3 and 1.031, when magic_quotes_gpc is disabled, allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) mail, (2) password, and (3) letra parameters to index.php; (4) y and (5) m parameters to sobre.php; and the (6) dcTema, (7) madsTema, (8) zthesTema, (9) skosTema, and (10) xtmTema parameters to xml.php.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/54245; http://osvdb.org/54246; http://secunia.com/advisories/34983
CVE: CVE-2009-1585
Published: 2009-05-07
Description: Multiple SQL injection vulnerabilities in TemaTres 1.031, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id_correo_electronico and (2) id_password parameters to login.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/54244; http://secunia.com/advisories/34983; http://osvdb.org/54244
CVE: CVE-2009-1586
Published: 2009-05-07
Description: Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to execute arbitrary code via a crafted DTD reference in a DOCTYPE element in an NZB file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blog.teusink.net/2009/05/grabit-172-beta-3-nzb-file-parsing.html; http://osvdb.org/54205; http://secunia.com/advisories/34893
CVE: CVE-2009-1587
Published: 2009-05-07
Description: index.php in PHP Site Lock 2.0 allows remote attackers to bypass authentication and obtain administrative access by setting the login_id, group_id, login_name, user_id, and user_type cookies to certain values.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://osvdb.org/54203; http://secunia.com/advisories/34995; http://www.vupen.com/english/advisories/2009/1249
CVE: CVE-2009-1588
Published: 2009-05-08
Description: Cross-site scripting (XSS) vulnerability in CGI RESCUE MiniBBS 8t before 8.95t, 8 before 8.95, 9 before 9.08, and 10 before 10.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN11396739/index.html; http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000022.html; http://secunia.com/advisories/34887
CVE: CVE-2009-1589
Published: 2009-05-08
Description: Unspecified vulnerability in CGI RESCUE MiniBBS22 before 1.01 allows remote attackers to send email to arbitrary recipients via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://jvn.jp/en/jp/JVN36982346/index.html; http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000021.html; http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/[PII_REDACTED]2937
CVE: CVE-2009-1590
Published: 2009-05-08
Description: Unspecified vulnerability in CGI RESCUE FORM2MAIL before 1.42 allows remote attackers to send email to arbitrary recipients via a web form.
CVSS Score: 5.0 (MEDIUM)
References: http://jvn.jp/en/jp/JVN76370393/index.html; http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000023.html; http://osvdb.org/54097
CVE: CVE-2009-1591
Published: 2009-05-08
Description: CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cross-site scripting (XSS) or HTTP response splitting attacks, via CRLF sequences in an unspecified web form.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN28020230/index.html; http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000024.html; http://secunia.com/advisories/34862
CVE: CVE-2009-1592
Published: 2009-05-08
Description: Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long banner.  NOTE: this might overlap CVE-2003-1368.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/54219; http://secunia.com/advisories/34993; http://www.securityfocus.com/bid/34822
CVE: CVE-2009-1595
Published: 2009-05-11
Description: The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-287
References: http://osvdb.org/54189; http://secunia.com/advisories/34976; http://www.igniterealtime.org/builds/openfire/docs/latest/changelog.html
CVE: CVE-2009-1596
Published: 2009-05-11
Description: Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password (aka canChangePassword) console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwd_change IQ packet.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: http://secunia.com/advisories/34984; http://www.igniterealtime.org/community/message/190280; http://www.igniterealtime.org/issues/browse/JM-1532