deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-1882
Published: 2009-06-02
Description: Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF file, which triggers a buffer overflow.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://imagemagick.org/script/changelog.php; http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033766.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033833.html
CVE: CVE-2009-0185
Published: 2009-06-02
Description: Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted MS ADPCM encoded audio data in an AVI movie file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html; http://osvdb.org/54879; http://secunia.com/advisories/35091
CVE: CVE-2009-0188
Published: 2009-06-02
Description: Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie composed of a Sorenson 3 video file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html; http://secunia.com/advisories/35091; http://secunia.com/secunia_research/2009-10/
CVE: CVE-2009-0893
Published: 2009-06-02
Description: Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore library in Xvid before 1.2.2, as used by Windows Media Player and other applications, allow remote attackers to execute arbitrary code by providing a crafted macroblock (aka MBlock) number in a video stream in a crafted movie file that triggers heap memory corruption, related to a "missing resync marker range check" and the (1) decoder_iframe, (2) decoder_pframe, and (3) decoder_bframe functions.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c; http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c?r1=1.80&r2=1.81; http://secunia.com/advisories/35274
CVE: CVE-2009-0894
Published: 2009-06-02
Description: Heap-based buffer overflow in the decoder_create function in the initialization functionality in xvidcore/src/decoder.c in Xvid before 1.2.2, as used by Windows Media Player and other applications, allows remote attackers to execute arbitrary code via vectors involving the DirectShow (aka DShow) frontend and improper handling of the XVID_ERR_MEMORY return code during processing of a crafted movie file. NOTE: some of these details are obtained from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c; http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c?r1=1.80&r2=1.81; http://www.securityfocus.com/bid/35158
CVE: CVE-2009-0950
Published: 2009-06-02
Description: Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00001.html; http://osvdb.org/54833; http://redpig.dataspill.org/2009/05/drive-by-attack-for-itunes-811.html
CVE: CVE-2009-0951
Published: 2009-06-02
Description: Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC compression file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html; http://osvdb.org/54878; http://secunia.com/advisories/35091
CVE: CVE-2009-0952
Published: 2009-06-02
Description: Buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted compressed PSD image.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html; http://osvdb.org/54877; http://secunia.com/advisories/35091
CVE: CVE-2009-0953
Published: 2009-06-02
Description: Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html; http://osvdb.org/54876; http://secunia.com/advisories/35091
CVE: CVE-2009-0954
Published: 2009-06-02
Description: Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie file containing crafted Clipping Region (CRGN) atom types.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html; http://osvdb.org/54875; http://secunia.com/advisories/35091
CVE: CVE-2009-0955
Published: 2009-06-02
Description: Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted image description atoms in an Apple video file, related to a "sign extension issue."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html; http://osvdb.org/54874; http://secunia.com/advisories/35091
CVE: CVE-2009-0956
Published: 2009-06-02
Description: Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie containing a user data atom of size zero.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html; http://secunia.com/advisories/35091; http://support.apple.com/kb/HT3591
CVE: CVE-2009-0957
Published: 2009-06-02
Description: Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 image.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html; http://osvdb.org/54873; http://secunia.com/advisories/35091
CVE: CVE-2009-0896
Published: 2009-06-03
Description: Buffer overflow in the queue manager in IBM WebSphere MQ 6.x before 6.0.2.7 and 7.x before 7.0.1.0 allows remote attackers to execute arbitrary code via a crafted request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/35303; http://securitytracker.com/id?1022311; http://www-01.ibm.com/support/docview.wss?uid=swg21386826
CVE: CVE-2009-0899
Published: 2009-06-03
Description: IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM WebSphere Portal Server 5.1 through 6.0, and IBM Integrated Solutions Console (ISC) 6.0.1 do not properly set the IsSecurityEnabled security flag during migration of WebSphere Member Manager (WMM) to Virtual Member Manager (VMM) and a Federated Repository, which allows attackers to obtain sensitive information from repositories via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg21375859; http://www-1.ibm.com/support/docview.wss?uid=swg1PK78134; http://www.securityfocus.com/bid/35406
CVE: CVE-2009-1898
Published: 2009-06-03
Description: The secure login page in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 does not redirect to an https page upon receiving an http request, which makes it easier for remote attackers to read the contents of WAS sessions by sniffing the network.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/35301; http://www-01.ibm.com/support/docview.wss?uid=swg27006876; http://www-1.ibm.com/support/docview.wss?uid=swg1PK77010
CVE: CVE-2009-1899
Published: 2009-06-03
Description: Unspecified vulnerability in the Administrative Configservice API in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5 on z/OS allows remote authenticated users to obtain sensitive information via unknown use of the wsadmin scripting tool, related to a "security exposure in wsadmin."
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/35301; http://www-01.ibm.com/support/docview.wss?uid=swg27006876; http://www-01.ibm.com/support/docview.wss?uid=swg27007951
CVE: CVE-2009-1900
Published: 2009-06-03
Description: The Configservice APIs in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5, when tracing is enabled, allow remote attackers to obtain sensitive information via unspecified use of the wsadmin scripting tool.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/35301; http://www-01.ibm.com/support/docview.wss?uid=swg27006876; http://www-01.ibm.com/support/docview.wss?uid=swg27007951
CVE: CVE-2009-1901
Published: 2009-06-03
Description: The Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 permits "non-standard http methods," which has unknown impact and remote attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www-01.ibm.com/support/docview.wss?uid=swg27006876; http://www-1.ibm.com/support/docview.wss?uid=swg1PK73246; http://www.securityfocus.com/bid/35405
CVE: CVE-2009-1902
Published: 2009-06-03
Description: The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service (crash) via a multipart form datapost request with a missing part header name, which triggers a NULL pointer dereference.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html; http://secunia.com/advisories/34256; http://secunia.com/advisories/34311
CVE: CVE-2009-1903
Published: 2009-06-03
Description: The PDF XSS protection feature in ModSecurity before 2.5.8 allows remote attackers to cause a denial of service (Apache httpd crash) via a request for a PDF file that does not use the GET method.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/34256; http://secunia.com/advisories/34311; http://secunia.com/advisories/35687
CVE: CVE-2008-2154
Published: 2009-06-03
Description: IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 provides an INSTALL_JAR (aka sqlj.install_jar) procedure, which allows remote authenticated users to create or overwrite arbitrary files via unspecified calls.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-16
References: ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT; http://osvdb.org/48147; http://secunia.com/advisories/31787
CVE: CVE-2008-6820
Published: 2009-06-03
Description: The db2fmp process in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 on Windows runs with "OS privilege," which has unknown impact and attack vectors, a different vulnerability than CVE-2008-3856.
CVSS Score: 10.0 (HIGH)
CWE: CWE-16
References: ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT; http://osvdb.org/48149; http://www-01.ibm.com/support/docview.wss?uid=swg1JR30026
CVE: CVE-2008-6821
Published: 2009-06-03
Description: Buffer overflow in the DAS server in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 might allow attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, a different vulnerability than CVE-2007-3676 and CVE-2008-3853.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT; http://secunia.com/advisories/31787; http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22004
CVE: CVE-2009-1905
Published: 2009-06-03
Description: The Common Code Infrastructure component in IBM DB2 8 before FP17, 9.1 before FP7, and 9.5 before FP4, when LDAP security (aka IBMLDAPauthserver) and anonymous bind are enabled, allows remote attackers to bypass password authentication and establish a database connection via unspecified vectors.
CVSS Score: 2.6 (LOW)
CWE: CWE-287
References: ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT; http://secunia.com/advisories/31787; http://secunia.com/advisories/35235
CVE: CVE-2009-1906
Published: 2009-06-03
Description: The DRDA Services component in IBM DB2 9.1 before FP7 and 9.5 before FP4 allows remote attackers to cause a denial of service (memory corruption and application crash) via an IPv6 address in the correlation token in the APPID string, as demonstrated by an APPID string sent by the third-party DataDirect JDBC driver 3.7.32.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/35235; http://www-01.ibm.com/support/docview.wss?uid=swg1IZ36683; http://www-01.ibm.com/support/docview.wss?uid=swg1IZ38874
CVE: CVE-2008-6822
Published: 2009-06-04
Description: Unrestricted file upload vulnerability in uploadp.php in New Earth Programming Team (NEPT) imgupload (aka Image Uploader) 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a modified content type, then accessing this file via a direct request, as demonstrated by an upload with an image/jpeg content type.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/49428; http://secunia.com/advisories/32412; http://www.securityfocus.com/bid/31909
CVE: CVE-2008-6823
Published: 2009-06-04
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface on the A-LINK WL54AP3 and WL54AP2 access points before firmware 1.4.2-eng1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify the network configuration via certain parameters to goform/formWanTcpipSetup or (2) modify credentials via certain parameters to goform/formPasswordSetup.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/49466; http://secunia.com/advisories/32421; http://www.a-link.com/WL54AP3.html
CVE: CVE-2008-6824
Published: 2009-06-04
Description: The management interface on the A-LINK WL54AP3 and WL54AP2 access points has a blank default password for the admin account, which makes it easier for remote attackers to obtain access.
CVSS Score: 10.0 (HIGH)
CWE: CWE-310
References: http://www.louhinetworks.fi/advisory/alink_081028.txt; http://www.securityfocus.com/archive/1/497997/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/51199
CVE: CVE-2009-1385
Published: 2009-06-04
Description: Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet (aka e1000) before 7.5.5 allows remote attackers to cause a denial of service (panic) via a crafted frame size.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ea30e11970a96cfe5e32c03a[PII_REDACTED]3b4a10; http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html; http://osvdb.org/54892
CVE: CVE-2009-1386
Published: 2009-06-04
Description: ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-476
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc; http://cvs.openssl.org/chngview?cn=17369; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444
CVE: CVE-2009-1387
Published: 2009-06-04
Description: The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a "fragment bug."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-476
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc; http://cvs.openssl.org/chngview?cn=17958; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444
CVE: CVE-2009-1907
Published: 2009-06-04
Description: Cross-site scripting (XSS) vulnerability in claroline/linker/notfound.php in Claroline 1.8.11 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://forum.claroline.net/viewtopic.php?f=69&t=16193&p=42102#p42099; http://gsasec.blogspot.com/2009/05/claroline-v1811-cross-site-scripting.html; http://secunia.com/advisories/35019
CVE: CVE-2009-1908
Published: 2009-06-04
Description: Cross-site scripting (XSS) vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://dev.openskip.org/redmine/issues/show/677; http://jvn.jp/en/jp/JVN43233160/index.html; http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000025.html
CVE: CVE-2009-1909
Published: 2009-06-04
Description: SQL injection vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://dev.openskip.org/redmine/issues/show/677; http://jvn.jp/en/jp/JVN03114223/index.html; http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000026.html
CVE: CVE-2009-1910
Published: 2009-06-04
Description: SQL injection vulnerability in index.php in RTWebalbum 1.0.462 allows remote attackers to execute arbitrary SQL commands via the AlbumId parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://rtwebalbum.svn.sourceforge.net/viewvc/rtwebalbum/; http://rtwebalbum.svn.sourceforge.net/viewvc/rtwebalbum/index.php?view=log; http://secunia.com/advisories/35022
CVE: CVE-2009-1911
Published: 2009-06-04
Description: Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery (TWG) 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to admin/index.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/35020; http://secunia.com/advisories/35060; http://www.securityfocus.com/archive/1/503396/100/0/threaded
CVE: CVE-2009-1912
Published: 2009-06-04
Description: Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to include and execute arbitrary local .php files via a .. (dot dot) in a language cookie. NOTE: this can be leveraged for SQL injection by including awards.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/54295; http://secunia.com/advisories/35016; http://www.osvdb.org/54296
CVE: CVE-2009-1913
Published: 2009-06-04
Description: SQL injection vulnerability in manager.php in LuxBum 0.5.5, when magic_quotes_gpc is disabled and dotclear authentication is used, allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/35032; http://www.securityfocus.com/bid/34889; http://www.vupen.com/english/advisories/2009/1281
CVE: CVE-2009-1914
Published: 2009-06-04
Description: The pci_register_iommu_region function in arch/sparc/kernel/pci_common.c in the Linux kernel before 2.6.29 on the sparc64 platform allows local users to cause a denial of service (system crash) by reading the /proc/iomem file, related to uninitialized pointers and the request_resource function.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=192d7a4667c6d11d1a174ec4cad9a3c5d5f9043c; http://osvdb.org/54908; http://secunia.com/advisories/35656
CVE: CVE-2009-1915
Published: 2009-06-04
Description: Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial of service (persistent crash) and possibly execute arbitrary code via an Internet shortcut .URL file containing a long URL parameter, which triggers a crash when browsing a folder that contains this file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/54893; http://www.securityfocus.com/archive/1/503935/100/0/threaded; http://www.securityfocus.com/bid/35150
CVE: CVE-2009-1916
Published: 2009-06-04
Description: dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the ns parameter.
CVSS Score: 10.0 (HIGH)
CWE: CWE-78
References: http://secunia.com/advisories/34773; http://www.securityfocus.com/bid/34559; https://www.exploit-db.com/exploits/8454
CVE: CVE-2009-1932
Published: 2009-06-04
Description: Multiple integer overflows in the (1) user_info_callback, (2) user_endrow_callback, and (3) gst_pngdec_task functions (ext/libpng/gstpngdec.c) in GStreamer Good Plug-ins (aka gst-plugins-good or gstreamer-plugins-good) 0.10.15 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PNG file, which triggers a buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=d9544bcc44adcef769cbdf7f6453e140058a3adc; http://osvdb.org/54827; http://secunia.com/advisories/35205
CVE: CVE-2009-0033
Published: 2009-06-05
Description: Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN87272440/index.html; http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
CVE: CVE-2009-0580
Published: 2009-06-05
Description: Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6623&w=2
CVE: CVE-2009-0783
Published: 2009-06-05
Description: Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6623&w=2