deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-0137
Published: 2010-01-21
Description: Unspecified vulnerability in the sshd_child_handler process in the SSH server in Cisco IOS XR 3.4.1 through 3.7.0 allows remote attackers to cause a denial of service (process crash and memory consumption) via a crafted SSH2 packet, aka Bug ID CSCsu10574.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/38227; http://securitytracker.com/id?1023480; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b13512.shtml
CVE: CVE-2010-0138
Published: 2010-01-21
Description: Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution (LMS), allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol (GIOP) request, related to a "third-party component," aka Bug ID CSCsv62350.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/38230; http://securitytracker.com/id?1023484; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1351d.shtml
CVE: CVE-2010-0370
Published: 2010-01-21
Description: Cross-site scripting (XSS) vulnerability in the Node Blocks module 5.x-1.1 and earlier, and 6.x-1.3 and earlier, a module for Drupal, allows remote authenticated users, with permissions to create or edit content and administer blocks, to inject arbitrary web script or HTML via the edit-title parameter (aka block title).
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://drupal.org/node/683584; http://drupal.org/node/683586; http://drupal.org/node/683598
CVE: CVE-2010-0371
Published: 2010-01-21
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Hitmaaan Gallery 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) gall and (2) levela parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/61801; http://packetstormsecurity.org/1001-exploits/galleriehitmaaan-xss.txt; http://secunia.com/advisories/38234
CVE: CVE-2010-0372
Published: 2010-01-21
Description: SQL injection vulnerability in the Articlemanager (com_articlemanager) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the artid parameter in a display action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1001-exploits/joomlaarticlemanager-sql.txt; http://www.exploit-db.com/exploits/11140; http://www.securityfocus.com/bid/37799
CVE: CVE-2010-0373
Published: 2010-01-21
Description: SQL injection vulnerability in the libros (com_libros) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1001-exploits/joomlalibros-sql.txt; http://www.exploit-db.com/exploits/11178; https://exchange.xforce.ibmcloud.com/vulnerabilities/55696
CVE: CVE-2010-0374
Published: 2010-01-21
Description: Cross-site scripting (XSS) vulnerability in the Marketplace (com_marketplace) component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the catid parameter in a show_category action to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.packetstormsecurity.com/1001-exploits/joomlamarketplace-xss.txt; http://www.securityfocus.com/bid/37819; https://exchange.xforce.ibmcloud.com/vulnerabilities/55662
CVE: CVE-2010-0375
Published: 2010-01-21
Description: SQL injection vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to execute arbitrary SQL commands via the cat parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/38036; http://www.exploit-db.com/exploits/11082; http://www.osvdb.org/61617
CVE: CVE-2010-0376
Published: 2010-01-21
Description: Cross-site scripting (XSS) vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to inject arbitrary web script or HTML via the cat parameter.  NOTE: this issue is reportedly resultant from a forced SQL error message that occurs from exploitation of CVE-2010-0375.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1001-exploits/phpcalendars-xss.txt; http://secunia.com/advisories/38036; http://www.exploit-db.com/exploits/11082
CVE: CVE-2010-0377
Published: 2010-01-21
Description: SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a play_game action.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1001-exploits/phpmyspace-sql.txt; http://secunia.com/advisories/38245; http://packetstormsecurity.org/1001-exploits/phpmyspace-sql.txt
CVE: CVE-2010-0378
Published: 2010-01-21
Description: Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to execute arbitrary code by unloading a Flash object that is currently being accessed by a script, leading to memory corruption, aka a "Movie Unloading Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://secunia.com/advisories/27105; http://secunia.com/secunia_research/2007-77/; http://securitytracker.com/id?1023435
CVE: CVE-2010-0379
Published: 2010-01-21
Description: Multiple unspecified vulnerabilities in the Macromedia Flash ActiveX control in Adobe Flash Player 6, as distributed in Microsoft Windows XP SP2 and SP3, might allow remote attackers to execute arbitrary code via unspecified vectors that are not related to the use-after-free "Movie Unloading Vulnerability" (CVE-2010-0378).  NOTE: due to lack of details, it is not clear whether this overlaps any other CVE item.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/27105; http://securitytracker.com/id?1023435; http://www.microsoft.com/technet/security/advisory/979267.mspx
CVE: CVE-2010-0230
Published: 2010-01-22
Description: SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html
CVE: CVE-2010-0027
Published: 2010-01-22
Description: The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a crafted URL, aka "URL Validation Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/509470/100/0/threaded; http://www.us-cert.gov/cas/techalerts/TA10-040A.html; http://www.zerodayinitiative.com/advisories/ZDI-10-016/
CVE: CVE-2010-0097
Published: 2010-01-22
Description: ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034196.html
CVE: CVE-2010-0244
Published: 2010-01-22
Description: Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-2530 and CVE-2009-2531.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002; https://exchange.xforce.ibmcloud.com/vulnerabilities/55774; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8186
CVE: CVE-2010-0245
Published: 2010-01-22
Description: Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3671, CVE-2009-3674, and CVE-2010-0246.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002; https://exchange.xforce.ibmcloud.com/vulnerabilities/55775; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8491
CVE: CVE-2010-0246
Published: 2010-01-22
Description: Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3671, CVE-2009-3674, and CVE-2010-0245.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002; https://exchange.xforce.ibmcloud.com/vulnerabilities/55776; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8378
CVE: CVE-2010-0247
Published: 2010-01-22
Description: Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002; https://exchange.xforce.ibmcloud.com/vulnerabilities/55777; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8506
CVE: CVE-2010-0248
Published: 2010-01-22
Description: Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."
CVSS Score: 8.1 (HIGH)
CWE: CWE-94, CWE-416
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002; https://exchange.xforce.ibmcloud.com/vulnerabilities/55778; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8267
CVE: CVE-2010-0290
Published: 2010-01-22
Description: Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains (1) CNAME or (2) DNAME records, which do not have the intended validation before caching, aka Bug 20737.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4022.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html; http://marc.info/?l=oss-security&m=[PII_REDACTED]3704&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]0086&w=2
CVE: CVE-2010-0380
Published: 2010-01-22
Description: install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictions and modify application settings via a direct request.  NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16, CWE-264
References: http://packetstormsecurity.org/1001-exploits/phpcalendars-xss.txt; http://www.exploit-db.com/exploits/11082; http://packetstormsecurity.org/1001-exploits/phpcalendars-xss.txt
CVE: CVE-2010-0381
Published: 2010-01-22
Description: SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a show_stats action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/38245; http://secunia.com/advisories/38245
CVE: CVE-2010-0382
Published: 2010-01-22
Description: ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response, aka Bug 20819.  NOTE: this vulnerability exists because of a regression during the fix for CVE-2009-4022.
CVSS Score: 7.6 (HIGH)
References: http://secunia.com/advisories/40086; http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018; http://www.debian.org/security/2010/dsa-2054
CVE: CVE-2008-7253
Published: 2010-01-25
Description: The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-16
References: http://www-01.ibm.com/support/docview.wss?&uid=swg21201202; http://www.kb.cert.org/vuls/id/867593; http://www.kb.cert.org/vuls/id/AAMN-5K42VN
CVE: CVE-2009-4241
Published: 2010-01-25
Description: Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to execute arbitrary code via a file with invalid ASMRuleBook structures that trigger heap memory corruption.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/38218; http://securitytracker.com/id?1023489; http://service.real.com/realplayer/security/01192010_player/en/
CVE: CVE-2009-4242
Published: 2010-01-25
Description: Heap-based buffer overflow in the CGIFCodec::GetPacketBuffer function in datatype/image/gif/common/gifcodec.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, and 11.0; Linux RealPlayer 10; and Helix Player 10.x allows remote attackers to execute arbitrary code via a GIF file with crafted chunk sizes that trigger improper memory allocation.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.helixcommunity.org/pipermail/datatype-cvs/2008-September/008633.html; http://osvdb.org/61966; http://secunia.com/advisories/38218
CVE: CVE-2009-4243
Published: 2010-01-25
Description: RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allow remote attackers to have an unspecified impact via a crafted media file that uses HTTP chunked transfer coding, related to an "overflow."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/61967; http://secunia.com/advisories/38218; http://securitytracker.com/id?1023489
CVE: CVE-2009-4244
Published: 2010-01-25
Description: Heap-based buffer overflow in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, and 11.0; Linux RealPlayer 10; and Helix Player 10.x allows remote attackers to execute arbitrary code via an SIPR codec field with a small length value that triggers incorrect memory allocation.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/38218; http://securitytracker.com/id?1023489; http://service.real.com/realplayer/security/01192010_player/en/
CVE: CVE-2009-4245
Published: 2010-01-25
Description: Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a compressed GIF file, related to gifcodec.cpp and gifimage.cpp.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.helixcommunity.org/pipermail/datatype-cvs/2008-July/008455.html; http://osvdb.org/61969; http://secunia.com/advisories/38218
CVE: CVE-2009-4246
Published: 2010-01-25
Description: Stack-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows user-assisted remote attackers to execute arbitrary code via a malformed .RJS skin file that contains a web.xmb file with crafted length values.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/38218; http://securitytracker.com/id?1023489; http://service.real.com/realplayer/security/01192010_player/en/
CVE: CVE-2009-4247
Published: 2010-01-25
Description: Stack-based buffer overflow in protocol/rtsp/rtspclnt.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.x; RealPlayer SP 1.0.0 and 1.0.1; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, 11.0, and 11.0.1; Linux RealPlayer 10, 11.0.0, and 11.0.1; and Helix Player 10.x, 11.0.0, and 11.0.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an ASM RuleBook with a large number of rules, related to an "array overflow."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.helixcommunity.org/pipermail/helix-client-dev/2009-August/008092.html; http://lists.helixcommunity.org/pipermail/protocol-cvs/2009-August/001943.html; http://secunia.com/advisories/38218
CVE: CVE-2009-4248
Published: 2010-01-25
Description: Buffer overflow in the RTSPProtocol::HandleSetParameterRequest function in client/core/rtspprotocol.cpp in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted RTSP SET_PARAMETER request.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.helixcommunity.org/pipermail/client-cvs/2008-January/003756.html; http://lists.helixcommunity.org/pipermail/client-cvs/2008-January/003759.html; http://lists.helixcommunity.org/pipermail/client-dev/2008-January/004591.html
CVE: CVE-2009-4257
Published: 2010-01-25
Description: Heap-based buffer overflow in datatype/smil/common/smlpkt.cpp in smlrender.dll in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10 and 11.0.0, and Helix Player 10.x and 11.0.0 allows remote attackers to execute arbitrary code via an SMIL file with crafted string lengths.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.helixcommunity.org/pipermail/datatype-cvs/2008-September/008678.html; http://secunia.com/advisories/38218; http://secunia.com/advisories/38450
CVE: CVE-2010-0383
Published: 2010-01-25
Description: Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easier for man-in-the-middle attackers to compromise the anonymity of traffic sources and destinations.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://archives.seul.org/or/announce/Jan-2010/msg00000.html; http://archives.seul.org/or/talk/Jan-2010/msg00161.html; http://archives.seul.org/or/talk/Jan-2010/msg00162.html
CVE: CVE-2010-0384
Published: 2010-01-25
Description: Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the client IP address upon detection of erroneous client behavior, which might make it easier for local users to discover the identities of clients in opportunistic circumstances by reading log files.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://archives.seul.org/or/talk/Jan-2010/msg00162.html; http://archives.seul.org/or/talk/Jan-2010/msg00162.html
CVE: CVE-2010-0385
Published: 2010-01-25
Description: Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://archives.seul.org/or/announce/Jan-2010/msg00000.html; http://archives.seul.org/or/talk/Jan-2010/msg00162.html; http://secunia.com/advisories/38198
CVE: CVE-2010-0386
Published: 2010-01-25
Description: The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-16
References: http://sunsolve.sun.com/search/document.do?assetkey=1-66-200942-1; http://sunsolve.sun.com/search/document.do?assetkey=1-66-200942-1
CVE: CVE-2010-0387
Published: 2010-01-25
Description: Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update 7 allow remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long string in an "Authorization: Digest" HTTP header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70u7-digest.html; http://lists.immunitysec.com/pipermail/dailydave/2010-January/006014.html; http://securitytracker.com/id?1023488
CVE: CVE-2010-0388
Published: 2010-01-25
Description: Format string vulnerability in the WebDAV implementation in webservd in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in the encoding attribute of the XML declaration in a PROPFIND request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70-webdav.html; http://www.securityfocus.com/bid/37910; https://exchange.xforce.ibmcloud.com/vulnerabilities/55812
CVE: CVE-2010-0389
Published: 2010-01-25
Description: The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP request that lacks a method token.
CVSS Score: 5.0 (MEDIUM)
References: http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70-admin.html; http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70-admin.html