deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-0041
Published: 2009-01-14
Description: IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x before B.2.5.7, C.1.x.x before C.1.10.4, and C.2.x.x before C.2.1.2.1; and s800i 1.2.x before 1.3.0 responds differently to a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://downloads.digium.com/pub/security/AST-2009-001.html; http://secunia.com/advisories/33453; http://secunia.com/advisories/34982
CVE: CVE-2009-0119
Published: 2009-01-14
Description: Buffer overflow in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .chm file.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/4912; http://www.securityfocus.com/bid/33204; https://www.exploit-db.com/exploits/7720
CVE: CVE-2003-1566
Published: 2009-01-15
Description: Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain sensitive information without detection.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16
References: http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0321.html; http://www.aqtronix.com/Advisories/AQ-2003-02.txt; http://www.osvdb.org/4864
CVE: CVE-2003-1567
Published: 2009-01-15
Description: The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the content of the original request in the body of the response, which makes it easier for remote attackers to steal cookies and authentication credentials, or bypass the HttpOnly protection mechanism, by using TRACK to read the contents of the HTTP headers that are returned in the response, a technique that is similar to cross-site tracing (XST) using HTTP TRACE.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0321.html; http://www.aqtronix.com/Advisories/AQ-2003-02.txt; http://www.kb.cert.org/vuls/id/288308
CVE: CVE-2009-0120
Published: 2009-01-15
Description: The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote attackers to cause a denial of service (device reboot) by sending data over an established SSL connection, as demonstrated by the abc\r\n\r\n string data.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/4911; http://www.securityfocus.com/archive/1/499870/100/0/threaded; http://www.securityfocus.com/bid/33169
CVE: CVE-2009-0121
Published: 2009-01-15
Description: SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 allows remote attackers to execute arbitrary SQL commands via the password parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/33393; http://secunia.com/advisories/33393
CVE: CVE-1999-1593
Published: 2009-01-15
Description: Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration that causes WINS to change the domain controller to point to a malicious server.  NOTE: this problem may be limited when Windows 95/98 clients are used, or if the primary domain controller becomes unavailable.
CVSS Score: 7.6 (HIGH)
CWE: CWE-59
References: http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00371.html; http://seclists.org/bugtraq/2001/Jan/0264.html; http://seclists.org/bugtraq/2001/Jan/0269.html
CVE: CVE-2008-5902
Published: 2009-01-15
Description: Buffer overflow in the xrdp_bitmap_invalidate function in xrdp/xrdp_bitmap.c in xrdp 0.4.1 and earlier allows remote attackers to execute arbitrary code via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html; http://openwall.com/lists/oss-security/2009/01/12/3; http://packetstormsecurity.org/0812-advisories/VA_VD_87_08_XRDP.pdf
CVE: CVE-2008-5903
Published: 2009-01-15
Description: Array index error in the xrdp_bitmap_def_proc function in xrdp/funcs.c in xrdp 0.4.1 and earlier allows remote attackers to execute arbitrary code via vectors that manipulate the value of the edit_pos structure member.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html; http://openwall.com/lists/oss-security/2009/01/12/3; http://packetstormsecurity.org/0812-advisories/VA_VD_87_08_XRDP.pdf
CVE: CVE-2008-5904
Published: 2009-01-15
Description: The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to have an unknown impact via input data that sets crafted values for certain length variables, leading to a buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html; http://openwall.com/lists/oss-security/2009/01/12/3; http://packetstormsecurity.org/0812-advisories/VA_VD_87_08_XRDP.pdf
CVE: CVE-2008-5905
Published: 2009-01-15
Description: The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178; http://ktorrent.org/?q=node/23; http://openwall.com/lists/oss-security/2009/01/08/1
CVE: CVE-2008-5906
Published: 2009-01-15
Description: Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178; http://ktorrent.org/?q=node/23; http://openwall.com/lists/oss-security/2009/01/08/1
CVE: CVE-2008-5907
Published: 2009-01-15
Description: The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0' character constant to a NULL pointer.  NOTE: some sources incorrectly report this as a double free vulnerability.
CVSS Score: 5.0 (MEDIUM)
References: http://libpng.sourceforge.net/index.html; http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html; http://openwall.com/lists/oss-security/2009/01/09/1
CVE: CVE-2009-0029
Published: 2009-01-15
Description: The ABI in the Linux kernel 2.6.28 and earlier on s390, powerpc, sparc64, and mips 64-bit platforms requires that a 32-bit argument in a 64-bit register was properly sign extended when sent from a user-mode application, but cannot verify this, which allows local users to cause a denial of service (crash) or possibly gain privileges via a crafted system call.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html; http://marc.info/?l=linux-kernel&m=[PII_REDACTED]8910&w=2; http://secunia.com/advisories/33477
CVE: CVE-2009-0122
Published: 2009-01-15
Description: hplip.postinst in HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership of its configuration files within home directories.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/33539; http://www.securityfocus.com/bid/33249; http://www.ubuntu.com/usn/usn-708-1
CVE: CVE-2009-0123
Published: 2009-01-15
Description: Unspecified vulnerability in Apple Safari on Mac OS X 10.5 and Windows allows remote attackers to read arbitrary files on a client machine via vectors related to the association of Safari with the (1) feed, (2) feeds, and (3) feedsearch URL types for RSS feeds.  NOTE: as of 20090114, the only disclosure is a vague pre-advisory. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: http://brian.mastenbrook.net/display/27; http://isc.sans.org/diary.html?storyid=5689; http://secunia.com/advisories/33458
CVE: CVE-2009-0124
Published: 2009-01-15
Description: The tqsl_verifyDataBlock function in openssl_cert.cpp in American Radio Relay League (ARRL) tqsllib 2.0 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511509; http://openwall.com/lists/oss-security/2009/01/12/4; http://secunia.com/advisories/33543
CVE: CVE-2009-0125
Published: 2009-01-15
Description: NOTE: this issue has been disputed by the upstream vendor. nasl/nasl_crypto2.c in the Nessus Attack Scripting Language library (aka libnasl) 2.2.11 does not properly check the return value from the OpenSSL DSA_do_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.  NOTE: the upstream vendor has disputed this issue, stating "while we do misuse this function (this is a bug), it has absolutely no security ramification.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511517; http://cvs.fedoraproject.org/viewvc/rpms/libnasl/F-10/libnasl.spec?r1=1.16&r2=1.17; http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html
CVE: CVE-2009-0126
Published: 2009-01-15
Description: The decrypt_public function in lib/crypt.cpp in the client in Berkeley Open Infrastructure for Network Computing (BOINC) 6.2.14 and 6.4.5 does not check the return value from the OpenSSL RSA_public_decrypt function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://boinc.berkeley.edu/trac/changeset/16883; http://boinc.berkeley.edu/trac/ticket/823; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511521
CVE: CVE-2009-0127
Published: 2009-01-15
Description: M2Crypto does not properly check the return value from the OpenSSL EVP_VerifyFinal, DSA_verify, ECDSA_verify, DSA_do_verify, and ECDSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.  NOTE: a Linux vendor disputes the relevance of this report to the M2Crypto product because "these functions are not used anywhere in m2crypto.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511515; http://openwall.com/lists/oss-security/2009/01/12/4; https://bugzilla.redhat.com/show_bug.cgi?id=479676
CVE: CVE-2009-0128
Published: 2009-01-15
Description: plugins/crypto/openssl/crypto_openssl.c in Simple Linux Utility for Resource Management (aka SLURM or slurm-llnl) does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511511; http://openwall.com/lists/oss-security/2009/01/12/4; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511511
CVE: CVE-2009-0129
Published: 2009-01-15
Description: libcrypt-openssl-dsa-perl does not properly check the return value from the OpenSSL DSA_verify and DSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511519; http://openwall.com/lists/oss-security/2009/01/12/4; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511519
CVE: CVE-2009-0130
Published: 2009-01-15
Description: lib/crypto/c_src/crypto_drv.c in erlang does not properly check the return value from the OpenSSL DSA_do_verify function, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.  NOTE: a package maintainer disputes this issue, reporting that there is a proper check within the only code that uses the applicable part of crypto_drv.c, and thus "this report is invalid.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511520; http://openwall.com/lists/oss-security/2009/01/12/4; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511520
CVE: CVE-2009-0131
Published: 2009-01-15
Description: The UFS implementation in the kernel in Sun OpenSolaris snv_29 through snv_90 allows local users to cause a denial of service (panic) via the single posix_fallocate test in the SUSv3 POSIX test suite, related to an F_ALLOCSP fcntl call.
CVSS Score: 4.9 (MEDIUM)
References: http://bugs.opensolaris.org/view_bug.do?bug_id=6711995; http://sunsolve.sun.com/search/document.do?assetkey=1-26-239188-1; http://www.securityfocus.com/bid/33267
CVE: CVE-2009-0132
Published: 2009-01-15
Description: Integer overflow in the aio_suspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32-bit mode is enabled, allows local users to cause a denial of service (panic) via a large integer value in the second argument (aka nent argument).
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-189
References: http://secunia.com/advisories/33516; http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-59-1; http://sunsolve.sun.com/search/document.do?assetkey=1-26-247986-1
CVE: CVE-2009-0133
Published: 2009-01-15
Description: Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/4914; https://www.exploit-db.com/exploits/7727; http://securityreason.com/securityalert/4914
CVE: CVE-2009-0134
Published: 2009-01-16
Description: Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1 in AAA EasyGrid ActiveX 3.51 allows remote attackers to create and overwrite arbitrary files via the (1) DoSaveFile or (2) DoSaveHtmlFile method.  NOTE: vector 1 could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/33537; http://securityreason.com/securityalert/4913; http://www.securityfocus.com/bid/33272
CVE: CVE-2009-0135
Published: 2009-01-16
Description: Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to execute arbitrary code via an Audible Audio (.aa) file with a large (1) nlen or (2) vlen Tag value, each of which triggers a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://amarok.kde.org/en/releases/2.0.1.1; http://bugs.gentoo.org/show_bug.cgi?id=254896; http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html
CVE: CVE-2009-0136
Published: 2009-01-16
Description: Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via an Audible Audio (.aa) file with a crafted (1) nlen or (2) vlen Tag value, each of which can lead to an invalid pointer dereference, or the writing of a 0x00 byte to an arbitrary memory location, after an allocation failure.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://amarok.kde.org/en/releases/2.0.1.1; http://bugs.gentoo.org/show_bug.cgi?id=254896; http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html
CVE: CVE-2008-3818
Published: 2009-01-16
Description: Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2, 8.0.x, 8.5.1, and 8.5.2 allows remote attackers to cause a denial of service (control-card reset) via a crafted TCP session.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://securitytracker.com/id?1021592; http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4fa.shtml; http://www.securityfocus.com/bid/33261
CVE: CVE-2008-3821
Published: 2009-01-16
Description: Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN28344798/index.html; http://osvdb.org/51393; http://osvdb.org/51394
CVE: CVE-2008-4444
Published: 2009-01-16
Description: Cisco Unified IP Phone (aka SIP phone) 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a Realtime Transport Protocol (RTP) packet with malformed headers.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/4917; http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7960g_7940g/firmware/sip/8_10/english/release/notes/796040sip_810.html; http://www.securityfocus.com/archive/1/500059/100/0/threaded
CVE: CVE-2008-4770
Published: 2009-01-16
Description: The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to "encoding type."
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/32317; http://secunia.com/advisories/33689; http://secunia.com/advisories/34184
CVE: CVE-2008-5908
Published: 2009-01-16
Description: Unspecified vulnerability in the root/boot archive tool in Sun OpenSolaris has unknown impact and local attack vectors, related to a "Temporary file vulnerability," aka Bug ID 6653455.
CVSS Score: 7.2 (HIGH)
References: http://opensolaris.org/os/bug_reports/request_sponsor/; https://exchange.xforce.ibmcloud.com/vulnerabilities/48146; http://opensolaris.org/os/bug_reports/request_sponsor/
CVE: CVE-2008-5909
Published: 2009-01-16
Description: Unspecified vulnerability in conv_lpd in Sun OpenSolaris has unknown impact and local attack vectors, related to improper handling of temporary files, aka Bug ID 6655641.
CVSS Score: 7.2 (HIGH)
References: http://opensolaris.org/os/bug_reports/request_sponsor/; http://www.securityfocus.com/bid/33396; https://exchange.xforce.ibmcloud.com/vulnerabilities/48148
CVE: CVE-2008-5910
Published: 2009-01-16
Description: Unspecified vulnerability in txzonemgr in Sun OpenSolaris has unknown impact and local attack vectors, related to a "Temporary file vulnerability," aka Bug ID 6653462.
CVSS Score: 7.2 (HIGH)
References: http://opensolaris.org/os/bug_reports/request_sponsor/; http://www.securityfocus.com/bid/33395; https://exchange.xforce.ibmcloud.com/vulnerabilities/48150
CVE: CVE-2009-0053
Published: 2009-01-16
Description: PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to obtain the decryption key via unspecified vectors, related to a "logic error."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://osvdb.org/51395; http://secunia.com/advisories/33479; http://securitytracker.com/id?1021593
CVE: CVE-2009-0054
Published: 2009-01-16
Description: PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to capture credentials by tricking a user into reading a modified or crafted e-mail message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-255
References: http://osvdb.org/51396; http://secunia.com/advisories/33479; http://securitytracker.com/id?1021593
CVE: CVE-2009-0055
Published: 2009-01-16
Description: Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to modify appliance preferences as arbitrary users via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/51397; http://secunia.com/advisories/33479; http://securitytracker.com/id?1021594
CVE: CVE-2009-0056
Published: 2009-01-16
Description: Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to execute commands and modify appliance preferences as arbitrary users via a logout action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/51398; http://secunia.com/advisories/33479; http://securitytracker.com/id?1021594
CVE: CVE-2009-0167
Published: 2009-01-16
Description: Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to cause a denial of service via unspecified vectors, related to enumeration of "wrong printers," aka a "Temporary file vulnerability."
CVSS Score: 4.7 (MEDIUM)
References: http://opensolaris.org/os/bug_reports/request_sponsor/; http://secunia.com/advisories/33488; http://secunia.com/advisories/33705
CVE: CVE-2009-0168
Published: 2009-01-16
Description: Unspecified vulnerability in ppdmgr in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to cause a denial of service via unspecified vectors, related to a failure to "include all cache files," and improper handling of temporary files.
CVSS Score: 4.9 (MEDIUM)
References: http://opensolaris.org/os/bug_reports/request_sponsor/; http://secunia.com/advisories/33488; http://secunia.com/advisories/33705
CVE: CVE-2009-0169
Published: 2009-01-16
Description: Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1; http://sunsolve.sun.com/search/document.do?assetkey=1-26-249106-1; http://www.securityfocus.com/bid/33266