deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-2607
Published: 2009-07-27
Description: SQL injection vulnerability in the com_pinboard component for Joomla! allows remote attackers to execute arbitrary SQL commands via the task parameter in a showpic action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9017; http://www.securityfocus.com/bid/35493; https://exchange.xforce.ibmcloud.com/vulnerabilities/51359
CVE: CVE-2009-2608
Published: 2009-07-27
Description: Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to delete.php or (2) alphabet parameter to index.php.  NOTE: the edit.php and view.php vectors are already covered by CVE-2008-2565.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/35590; http://www.exploit-db.com/exploits/9023; http://www.securityfocus.com/archive/1/504595/100/0/threaded
CVE: CVE-2009-2609
Published: 2009-07-27
Description: SQL injection vulnerability in the amoCourse (com_amocourse) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9016; http://www.securityfocus.com/bid/35489; https://exchange.xforce.ibmcloud.com/vulnerabilities/51358
CVE: CVE-2009-2610
Published: 2009-07-27
Description: Cross-site scripting (XSS) vulnerability in the Links Related module in the Links Package 5.x before 5.x-1.13 and 6.x before 6.x-1.2, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via the title field.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://drupal.org/node/501356; http://drupal.org/node/501360; http://drupal.org/node/502112
CVE: CVE-2009-2611
Published: 2009-07-27
Description: Directory traversal vulnerability in infusions/last_seen_users_panel/last_seen_users_panel.php in MyFusion (aka MyF) 6 Beta, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the settings[locale] parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/9018; http://www.exploit-db.com/exploits/9018
CVE: CVE-2009-2612
Published: 2009-07-27
Description: SQL injection vulnerability in login.aspx in ProSMDR allows remote attackers to execute arbitrary SQL commands via the txtUser parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35614; http://secunia.com/advisories/35614
CVE: CVE-2009-2613
Published: 2009-07-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions LinkPal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) z_loginfailed.asp, (2) z_admin_login.asp, (3) z_forgot.asp, and possibly unspecified other components.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/35598; http://secunia.com/advisories/35598
CVE: CVE-2009-2614
Published: 2009-07-27
Description: SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions LinkPal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35598; http://secunia.com/advisories/35598
CVE: CVE-2009-2615
Published: 2009-07-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) z_admin_login.asp, (2) z_forgot.asp, and possibly unspecified other components.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/35625; http://secunia.com/advisories/35625
CVE: CVE-2009-2616
Published: 2009-07-27
Description: SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35625; http://secunia.com/advisories/35625
CVE: CVE-2009-2617
Published: 2009-07-27
Description: Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code via a long pathname in the source attribute of an item element in a .smpl playlist file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]0440&w=2; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]0913&w=2; http://secunia.com/advisories/35592
CVE: CVE-2009-2618
Published: 2009-07-27
Description: SQL injection vulnerability in the Surveys (aka NS-Polls) module in MDPro (MD-Pro) 1.083.x allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9021; http://www.securityfocus.com/bid/35495; https://exchange.xforce.ibmcloud.com/vulnerabilities/51385
CVE: CVE-2009-2619
Published: 2009-07-27
Description: SQL injection vulnerability in login.asp in DataCheck Solutions V-SpacePal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35612; http://secunia.com/advisories/35612
CVE: CVE-2009-2621
Published: 2009-07-28
Description: Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/36007; http://www.mandriva.com/security/advisories?name=MDVSA-2009:161; http://www.mandriva.com/security/advisories?name=MDVSA-2009:178
CVE: CVE-2009-2622
Published: 2009-07-28
Description: Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid status number," related to (a) HttpMsg.cc and (b) HttpReply.cc.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/36007; http://www.mandriva.com/security/advisories?name=MDVSA-2009:161; http://www.mandriva.com/security/advisories?name=MDVSA-2009:178
CVE: CVE-2009-2633
Published: 2009-07-28
Description: PHP remote file inclusion vulnerability in toolbar_ext.php in the VehicleManager (com_vehiclemanager) component 1.0 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/8920; http://www.exploit-db.com/exploits/8920
CVE: CVE-2009-2634
Published: 2009-07-28
Description: PHP remote file inclusion vulnerability in toolbar_ext.php in the MediaLibrary (com_media_library) component 1.5.3 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/8912; http://www.exploit-db.com/exploits/8912
CVE: CVE-2009-2635
Published: 2009-07-28
Description: PHP remote file inclusion vulnerability in toolbar_ext.php in the RealEstateManager (com_realestatemanager) component 1.0 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/8919; http://www.exploit-db.com/exploits/8919
CVE: CVE-2009-2636
Published: 2009-07-28
Description: Cross-site scripting (XSS) vulnerability in the Integration page in the WebMail component in Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0 allows remote attackers to inject arbitrary web script or HTML via an e-mail message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/54928; http://secunia.com/advisories/35392; http://www.kerio.com/support/security-advisories#0906
CVE: CVE-2009-2637
Published: 2009-07-28
Description: PHP remote file inclusion vulnerability in toolbar_ext.php in the BookLibrary (com_booklibrary) component 1.5.2.4 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/8908; http://www.exploit-db.com/exploits/8908
CVE: CVE-2009-2638
Published: 2009-07-28
Description: SQL injection vulnerability in the AkoBook (com_akobook) component 2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a reply action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/8911; http://www.securityfocus.com/bid/35268; http://www.exploit-db.com/exploits/8911
CVE: CVE-2009-2639
Published: 2009-07-28
Description: SQL injection vulnerability in admin.php in MRCGIGUY The Ticket System 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewticket action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/8917; http://www.exploit-db.com/exploits/8917
CVE: CVE-2009-2640
Published: 2009-07-28
Description: Multiple SQL injection vulnerabilities in cgi/admin.cgi in Interlogy Profile Manager Basic allow remote attackers to execute arbitrary SQL commands via a pmadm cookie in (1) an edittemp action or (2) a users action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/files/110437/Interlogy-Profile-Manager-Basic-Insecure-Cookie-Handling.html; http://www.exploit-db.com/exploits/8895; http://www.vupen.com/english/advisories/2009/1529
CVE: CVE-2009-2641
Published: 2009-07-28
Description: PHP remote file inclusion vulnerability in app_and_readme/navigator/index.php in School Data Navigator allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.  NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/8924; http://www.exploit-db.com/exploits/8924
CVE: CVE-2009-2642
Published: 2009-07-28
Description: index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer value, as demonstrated by a value of 13.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://www.exploit-db.com/exploits/8925; http://www.exploit-db.com/exploits/8925
CVE: CVE-2009-2643
Published: 2009-07-28
Description: Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 5.0 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246 and CVE-2009-0219.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/35254; http://www.blackberry.com/btsc/KB18327; http://www.osvdb.org/54767
CVE: CVE-2009-0696
Published: 2009-07-29
Description: The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-16
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-013.txt.asc; ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt; http://aix.software.ibm.com/aix/efixes/security/bind_advisory.asc
CVE: CVE-2009-0901
Published: 2009-07-29
Description: The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not prevent VariantClear calls on an uninitialized VARIANT, which allows remote attackers to execute arbitrary code via a malformed stream to an ATL (1) component or (2) control, related to ATL headers and error handling, aka "ATL Uninitialized Object Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6855&w=2; http://secunia.com/advisories/35967
CVE: CVE-2009-1164
Published: 2009-07-29
Description: The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.2 before 4.2.205.0 and 5.x before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a malformed response to a (1) HTTP or (2) HTTPS authentication request, aka Bug ID CSCsx03715.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml; http://www.vupen.com/english/advisories/2009/2021; http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml
CVE: CVE-2009-1165
Published: 2009-07-29
Description: Memory leak on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0, 5.1 before 5.1.163.0, and 5.0 and 5.2 before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (memory consumption and device reload) via SSH management connections, aka Bug ID CSCsw40789.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml; http://www.securityfocus.com/bid/35817; http://www.securitytracker.com/id?1022605
CVE: CVE-2009-1166
Published: 2009-07-29
Description: The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy27708.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml; http://www.securitytracker.com/id?1022605; http://www.vupen.com/english/advisories/2009/2021
CVE: CVE-2009-1167
Published: 2009-07-29
Description: Unspecified vulnerability on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to modify the configuration via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy44672.
CVSS Score: 10.0 (HIGH)
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml; http://www.securitytracker.com/id?1022606; http://www.vupen.com/english/advisories/2009/2021
CVE: CVE-2009-1426
Published: 2009-07-29
Description: Unspecified vulnerability on HP ProLiant DL and ML 100 Series G5, G5p, and G6 servers with ProLiant Onboard Administrator Powered by LO100i (formerly Lights Out 100) 3.07 and earlier allows remote attackers to cause a denial of service via unknown vectors.
CVSS Score: 7.8 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3139&w=2; http://secunia.com/advisories/35990; http://www.securitytracker.com/id?1022617
CVE: CVE-2009-1917
Published: 2009-07-29
Description: Microsoft Internet Explorer 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle attempts to access deleted objects in memory, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka "Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=953693; http://www.securityfocus.com/bid/35831; http://www.securitytracker.com/id?1022611
CVE: CVE-2009-1918
Published: 2009-07-29
Description: Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle table operations, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption by adding malformed elements to an empty DIV element, related to the getElementsByTagName method, aka "HTML Objects Memory Corruption Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=953693; http://www.securityfocus.com/archive/1/505523/100/0/threaded; http://www.securityfocus.com/bid/35826
CVE: CVE-2009-1919
Published: 2009-07-29
Description: Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle attempts to access deleted objects in memory, which allows remote attackers to execute arbitrary code via an HTML document containing embedded style sheets that modify unspecified rule properties that cause the behavior element to be "improperly processed," aka "Uninitialized Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/505524/100/0/threaded; http://www.securitytracker.com/id?1022611; http://www.us-cert.gov/cas/techalerts/TA09-195A.html
CVE: CVE-2009-2493
Published: 2009-07-29
Description: The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not properly restrict use of OleLoadFromStream in instantiating objects from data streams, which allows remote attackers to execute arbitrary code via a crafted HTML document with an ATL (1) component or (2) control, related to ATL headers and bypassing security policies, aka "ATL COM Initialization Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx; http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6855&w=2
CVE: CVE-2009-2495
Published: 2009-07-29
Description: The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka "ATL Null String Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6855&w=2; http://secunia.com/advisories/35967; http://secunia.com/advisories/36374
CVE: CVE-2009-2620
Published: 2009-07-29
Description: src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1 before 2.1.3, and 2.5 before 2.5 Beta 2 allows remote attackers to cause a denial of service (daemon crash) via a malformed op_connect_request message that triggers an infinite loop or NULL pointer dereference.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://tracker.firebirdsql.org/browse/CORE-2563; http://www.coresecurity.com/content/firebird-sql-dos; http://www.exploit-db.com/exploits/9295
CVE: CVE-2009-2644
Published: 2009-07-29
Description: Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to "pathnames for invalid fds."
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://secunia.com/advisories/36042; http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-42-1; http://sunsolve.sun.com/search/document.do?assetkey=1-66-264429-1
CVE: CVE-2009-1168
Published: 2009-07-30
Description: Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through 12.0(32)SY9, 12.2(33)SXI1, 12.2XNC before 12.2(33)XNC2, 12.2XND before 12.2(33)XND1, and 12.4(24)T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to cause a denial of service (memory corruption and device reload) by using an RFC4271 peer to send an update with a long series of AS numbers, aka Bug ID CSCsy86021.
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/36046; http://www.cisco.com/en/US/products/products_security_advisory09186a0080aea4c9.shtml; http://www.securityfocus.com/bid/35862
CVE: CVE-2009-2049
Published: 2009-07-30
Description: Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through 12.0(32)SY9, 12.2(33)SXI1 through 12.2(33)SXI2, 12.2XNC before 12.2(33)XNC2, 12.2XND before 12.2(33)XND1, and 12.4(24)T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to cause a denial of service (device reload) by using an RFC4271 peer to send a malformed update, aka Bug ID CSCta33973.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-16
References: http://secunia.com/advisories/36046; http://www.cisco.com/en/US/products/products_security_advisory09186a0080aea4c9.shtml; http://www.securityfocus.com/bid/35860