deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-3131
Published: 2009-11-11
Description: Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a spreadsheet with a crafted formula embedded in a cell, aka "Excel Formula Parsing Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id?1023157; http://www.us-cert.gov/cas/techalerts/TA09-314A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067
CVE: CVE-2009-3132
Published: 2009-11-11
Description: Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a spreadsheet containing a malformed formula, related to a "pointer corruption" issue, aka "Excel Index Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id?1023157; http://www.us-cert.gov/cas/techalerts/TA09-314A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067
CVE: CVE-2009-3133
Published: 2009-11-11
Description: Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a spreadsheet containing a malformed object that triggers memory corruption, related to "loading Excel records," aka "Excel Document Parsing Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id?1023157; http://www.us-cert.gov/cas/techalerts/TA09-314A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067
CVE: CVE-2009-3134
Published: 2009-11-11
Description: Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a spreadsheet with a malformed record object, aka "Excel Field Sanitization Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id?1023157; http://www.us-cert.gov/cas/techalerts/TA09-314A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067
CVE: CVE-2009-3931
Published: 2009-11-12
Description: Incomplete blacklist vulnerability in browser/download/download_exe.cc in Google Chrome before 3.0.195.32 allows remote attackers to force the download of certain dangerous files via a "Content-Disposition: attachment" designation, as demonstrated by (1) .mht and (2) .mhtml files, which are automatically executed by Internet Explorer 6; (3) .svg files, which are automatically executed by Safari; (4) .xml files; (5) .htt files; (6) .xsl files; (7) .xslt files; and (8) image files that are forbidden by the victim's site policy.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=23979; http://codereview.chromium.org/243115; http://codereview.chromium.org/261022
CVE: CVE-2009-3932
Published: 2009-11-12
Description: The Gears plugin in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service (memory corruption and plugin crash) or possibly execute arbitrary code via unspecified use of the Gears SQL API, related to putting "SQL metadata into a bad state."
CVSS Score: 9.3 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=26179; http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html; http://secunia.com/advisories/37273
CVE: CVE-2009-3933
Published: 2009-11-12
Description: WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service (CPU consumption) via a web page that calls the JavaScript setInterval method, which triggers an incompatibility between the WTF::currentTime and base::Time functions.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://code.google.com/p/chromium/issues/detail?id=25892; http://codereview.chromium.org/339039; http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html
CVE: CVE-2009-3934
Published: 2009-11-12
Description: The WebFrameLoaderClient::dispatchDidChangeLocationWithinPage function in src/webkit/glue/webframeloaderclient_impl.cc in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service via a page-local link, related to an "empty redirect chain," as demonstrated by a message in Yahoo! Mail.
CVSS Score: 4.3 (MEDIUM)
References: http://code.google.com/p/chromium/issues/detail?id=22205; http://codereview.chromium.org/326015; http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html
CVE: CVE-2009-3935
Published: 2009-11-12
Description: Multiple unspecified vulnerabilities in the Advanced Management Module firmware before 2.50G for the IBM BladeCenter T 8720-2xx and 8730-2xx have unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: ftp://download2.boulder.ibm.com/ecc/sar/CMA/XSA/00pj6/0/ibm_fw_amm_bbet50g_anyos_noarch.chg; http://www.securityfocus.com/bid/36970; http://www.vupen.com/english/advisories/2009/3188
CVE: CVE-2007-5475
Published: 2009-11-12
Description: Multiple buffer overflows in the Marvell wireless driver, as used in Linksys WAP4400N Wi-Fi access point with firmware 1.2.17 on the Marvell 88W8361P-BEM1 chipset, and other products, allow remote 802.11-authenticated users to cause a denial of service (wireless access point crash) and possibly execute arbitrary code via an association request with long (1) rates, (2) extended rates, and unspecified other information elements.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/37345; http://www.securityfocus.com/archive/1/507781/100/0/threaded; http://www.vupen.com/english/advisories/2009/3239
CVE: CVE-2009-0052
Published: 2009-11-12
Description: The Atheros wireless driver, as used in Netgear WNDAP330 Wi-Fi access point with firmware 2.1.11 and other versions before 3.0.3 on the Atheros AR9160-BC1A chipset, and other products, allows remote authenticated users to cause a denial of service (device reboot or hang) and possibly execute arbitrary code via a truncated reserved management frame.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/37344; http://www.osvdb.org/59880; http://www.securityfocus.com/archive/1/507777/100/0/threaded
CVE: CVE-2009-3548
Published: 2009-11-12
Description: The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.
CVSS Score: 7.5 (HIGH)
CWE: CWE-255
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02241113; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6623&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2771&w=2
CVE: CVE-2009-1570
Published: 2009-11-13
Description: Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-190
References: http://git.gnome.org/cgit/gimp/commit/?h=gimp-2-6&id=df2b0aca2e7cdb95ebfd3454c65aaba0a83e9bbe; http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html; http://secunia.com/advisories/37232
CVE: CVE-2009-2678
Published: 2009-11-13
Description: Unspecified vulnerability in Open System Services (OSS) Name Server on HP NonStop G06.27, G06.28, G06.29, G06.30, H06.06, H06.07, H06.08, and J06.03 allows remote attackers to obtain sensitive information via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01845977; http://secunia.com/advisories/37335; http://securitytracker.com/id?1023159
CVE: CVE-2009-2816
Published: 2009-11-13
Description: The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html; http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-2841
Published: 2009-11-13
Description: The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attackers to trigger sub-resource requests to arbitrary web sites via a crafted HTML document, as demonstrated by an HTML e-mail message that uses a media element for X-Confirm-Reading-To functionality, aka rdar problem 7271202.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html; http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044023.html
CVE: CVE-2009-2842
Published: 2009-11-13
Description: Apple Safari before 4.0.4 does not properly implement certain (1) Open Image and (2) Open Link menu options, which allows remote attackers to read local HTML files via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html; http://osvdb.org/59942; http://secunia.com/advisories/37346
CVE: CVE-2009-3384
Published: 2009-11-13
Description: Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html; http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-3565
Published: 2009-11-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Security Manager (NSM) before 5.1.11.6 allow remote attackers to inject arbitrary web script or HTML via the (1) iaction or (2) node parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://kc.mcafee.com/corporate/index?page=content&id=SB10004; http://secunia.com/advisories/37178; http://securitytracker.com/id?1023171
CVE: CVE-2009-3566
Published: 2009-11-13
Description: McAfee IntruShield Network Security Manager (NSM) before 5.1.11.8.1 does not include the HTTPOnly flag in the Set-Cookie header for the session identifier, which allows remote attackers to hijack a session by leveraging a cross-site scripting (XSS) vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/37178; http://securitytracker.com/id?1023172; http://www.osvdb.org/59912
CVE: CVE-2009-3676
Published: 2009-11-13
Description: The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service (infinite loop and system hang) via a (1) SMBv1 or (2) SMBv2 response packet that contains (a) an incorrect length value in a NetBIOS header or (b) an additional length field at the end of this response packet, aka "SMB Client Incomplete Response Vulnerability."
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://blogs.technet.com/msrc/archive/2009/11/13/microsoft-security-advisory-977544-released.aspx; http://g-laurent.blogspot.com/2009/11/windows-7-server-2008r2-remote-kernel.html; http://news.cnet.com/8301-27080_3-10395891-245.html
CVE: CVE-2009-3936
Published: 2009-11-13
Description: Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/TLS server and bypass authentication via a crafted certificate, a different vulnerability than CVE-2009-3555.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://secunia.com/advisories/37319; http://support.citrix.com/article/CTX123248; http://www.securityfocus.com/bid/37073
CVE: CVE-2009-3937
Published: 2009-11-13
Description: Memory leak in Solaris TCP sockets in Sun OpenSolaris snv_106 through snv_126 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors involving tcp_sendmsg processing "ancillary data."
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://sunsolve.sun.com/search/document.do?assetkey=1-66-266488-1; http://sunsolve.sun.com/search/document.do?assetkey=1-68-nv_osol0906u5-1; http://www.securityfocus.com/bid/36992
CVE: CVE-2009-3938
Published: 2009-11-13
Description: Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler (aka libpoppler) 0.10.6, 0.12.0, and possibly other versions, as used by the Abiword pdftoabw utility, allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PDF file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534680; http://bugs.freedesktop.org/attachment.cgi?id=30599&action=edit; http://bugs.freedesktop.org/show_bug.cgi?id=23074
CVE: CVE-2008-4826
Published: 2009-11-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-3853.  Reason: This candidate is a duplicate of CVE-2009-3853.  Notes: All CVE users should reference CVE-2009-3853 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2009-2746
Published: 2009-11-16
Description: Cross-site request forgery (CSRF) vulnerability in the administrative console in the Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/37221; http://www-01.ibm.com/support/docview.wss?uid=swg1PK87176; http://www-01.ibm.com/support/docview.wss?uid=swg1PK99477
CVE: CVE-2009-3888
Published: 2009-11-16
Description: The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service (OOPS) via an application that attempts to allocate a large amount of memory.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89a8640279f8bb78aaf778d1fc5c4a6778f18064; http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.6; http://www.openwall.com/lists/oss-security/2009/11/09/2
CVE: CVE-2009-3889
Published: 2009-11-16
Description: The dbg_lvl file for the megaraid_sas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to change the (1) behavior and (2) logging level of the driver by modifying this file.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-264
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=66dca9b8c50b5e59d3bea8b21cee5c6dae6c9c46; http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
CVE: CVE-2009-3939
Published: 2009-11-16
Description: The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-732
References: http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html
CVE: CVE-2009-3940
Published: 2009-11-16
Description: Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and Sun VirtualBox before 3.0.10, allows guest OS users to cause a denial of service (memory consumption) on the guest OS via unknown vectors.
CVSS Score: 2.1 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html; http://secunia.com/advisories/38420; http://sunsolve.sun.com/search/document.do?assetkey=1-66-271149-1
CVE: CVE-2009-3941
Published: 2009-11-16
Description: Martin Lambers mpop before 1.0.19, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://mpop.sourceforge.net/news.html; http://secunia.com/advisories/37312; http://www.vupen.com/english/advisories/2009/3225
CVE: CVE-2009-3942
Published: 2009-11-16
Description: Martin Lambers msmtp before 1.4.19, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-310
References: http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html; http://msmtp.sourceforge.net/news.html; http://secunia.com/advisories/37321
CVE: CVE-2009-3943
Published: 2009-11-16
Description: Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (application hang) via a JavaScript loop that configures the home page by using the setHomePage method and a DHTML behavior property.
CVSS Score: 5.0 (MEDIUM)
References: http://websecurity.com.ua/3658/; http://www.securityfocus.com/archive/1/507731/100/0/threaded; http://www.securityfocus.com/archive/1/507760/100/0/threaded
CVE: CVE-2009-3944
Published: 2009-11-16
Description: Research In Motion (RIM) BlackBerry Browser on the BlackBerry 8800 allows remote attackers to cause a denial of service (application hang) via a JavaScript loop that configures the home page by using the setHomePage method and a DHTML behavior property.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/507759/100/0/threaded; http://www.securityfocus.com/archive/1/507759/100/0/threaded
CVE: CVE-2009-3945
Published: 2009-11-16
Description: Unspecified vulnerability in the Front-End Editor in the com_content component in Joomla! before 1.5.15 allows remote authenticated users, with Author privileges, to replace the articles of an arbitrary user via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://developer.joomla.org/security/news/[PII_REDACTED]3-core-front-end-editor-issue-.html; http://osvdb.org/59801; http://secunia.com/advisories/37262
CVE: CVE-2009-3946
Published: 2009-11-16
Description: Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain the extension's version number, via a direct request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://developer.joomla.org/security/news/[PII_REDACTED]3-core-xml-file-read-issue.html; http://secunia.com/advisories/37262; http://www.osvdb.org/59800
CVE: CVE-2009-3947
Published: 2009-11-16
Description: Buffer overflow in the FTP service on the Tandberg MXP F7.0 allows remote attackers to cause a denial of service (process crash or device reboot) or possibly execute arbitrary code via a long USER command, as demonstrated by a command ending with many space characters.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/9131; https://exchange.xforce.ibmcloud.com/vulnerabilities/51673; http://www.exploit-db.com/exploits/9131
CVE: CVE-2009-3948
Published: 2009-11-16
Description: JetAudio 7.5.3 COWON Media Center allows remote attackers to cause a denial of service (memory consumption and application crash) via a long string at the end of a .wav file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://www.exploit-db.com/exploits/9139; https://exchange.xforce.ibmcloud.com/vulnerabilities/51697; http://www.exploit-db.com/exploits/9139
CVE: CVE-2009-3949
Published: 2009-11-16
Description: cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewauthor action, which allows remote attackers to create administrative accounts via the name, password, and conf_password parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.exploit-db.com/exploits/9159; https://exchange.xforce.ibmcloud.com/vulnerabilities/51779; http://www.exploit-db.com/exploits/9159
CVE: CVE-2009-3950
Published: 2009-11-16
Description: Multiple cross-site scripting (XSS) vulnerabilities in Bractus SunTrack allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to newprofile.html; the (2) firstname, (3) lastname, and (4) company parameters to signup/signup.html; and the (5) firstname, (6) lastname, and (7) address[0].street1 parameters to contact.html.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/507655/100/0/threaded; http://www.securityfocus.com/archive/1/507655/100/0/threaded
CVE: CVE-2009-3841
Published: 2009-11-17
Description: Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.5x, 7.5x, and 7.60 on Windows allows remote authenticated users to execute arbitrary code via unknown vectors.
CVSS Score: 9.0 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01861595; http://osvdb.org/60222; http://secunia.com/advisories/37388
CVE: CVE-2009-3890
Published: 2009-11-17
Description: Unrestricted file upload vulnerability in the wp_check_filetype function in wp-includes/functions.php in WordPress before 2.8.6, when a certain configuration of the mod_mime module in the Apache HTTP Server is enabled, allows remote authenticated users to execute arbitrary code by posting an attachment with a multiple-extension filename, and then accessing this attachment via a direct request to a wp-content/uploads/ pathname, as demonstrated by a .php.jpg filename.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0142.html; http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0149.html; http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0153.html